@transcodely/sdk 0.3.6 → 0.3.8

package/dist/index.d.ts

@@ -381,6 +381,135 @@ declare enum BillingStanding {
      */
     DELINQUENT = 4
 }
+/**
+ * How AUTOMATION is allowed to treat an organization.
+ *
+ * Orthogonal to BillingStanding, and the distinction is the whole point.
+ * Standing is a derived FACT about payment health. Treatment is a commercial
+ * DECISION about whether a cron may act on that fact — email the customer,
+ * block their creates, suspend them. An account can be in dunning and
+ * untouchable at the same time.
+ *
+ * ASSIGNED, never derived: an operator says what a relationship is, through the
+ * audited admin RPC. Admin surfaces only; a customer does not learn from an API
+ * field how patiently we treat them.
+ *
+ * @generated from enum transcodely.v1.BillingTreatment
+ */
+declare enum BillingTreatment {
+    /**
+     * @generated from enum value: BILLING_TREATMENT_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * The default and the full lifecycle: the dunning ladder, the soft limit,
+     * suspension, every customer email, and the dispute posture.
+     *
+     * @generated from enum value: BILLING_TREATMENT_NORMAL = 1;
+     */
+    NORMAL = 1,
+    /**
+     * Billed COMPLETELY NORMALLY — payment method on file, monthly statements,
+     * real charges — and exempt from every automated interruption. A failed
+     * payment or a dispute on one of these routes to the founder instead of to
+     * the customer, so it becomes a conversation rather than a cutoff.
+     *
+     * Requires a payment method on file: this is a promise not to interrupt
+     * someone who pays, not a way to run an account with no card.
+     *
+     * @generated from enum value: BILLING_TREATMENT_TRUSTED = 2;
+     */
+    TRUSTED = 2,
+    /**
+     * Grandfather / comp semantics: not billed, not enforced. Internal, dogfood
+     * and legacy accounts. Selecting it also maintains payment_method_required
+     * and billing_exempt, in the same transaction, so the standing derivation and
+     * this value can never describe different postures.
+     *
+     * @generated from enum value: BILLING_TREATMENT_EXEMPT = 3;
+     */
+    EXEMPT = 3
+}
+/**
+ * How far the CONSEQUENCES of an unpaid statement have progressed.
+ *
+ * Deliberately NOT a fifth BillingStanding. Standing is payment HEALTH, derived
+ * from facts. This is what we have DONE about it, and it needs states standing
+ * cannot express: "new jobs refused but playback still serving" and "suspended"
+ * are consequences, not healths, and an account can be delinquent for weeks at
+ * any of them.
+ *
+ * Every rung's timing derives from the episode's own start, and the schedule is
+ * a set of Go constants (domain.DunningStage) rather than configuration — the
+ * day counts below are documentation of that policy, not a second copy of it.
+ *
+ * ADMIN SURFACES ONLY in this release. A customer is told what is happening to
+ * their account in the email that accompanies each rung; they do not read the
+ * ladder's internal vocabulary out of an API.
+ *
+ * @generated from enum transcodely.v1.DunningStage
+ */
+declare enum DunningStage {
+    /**
+     * @generated from enum value: DUNNING_STAGE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * The resting state: no episode, or one that a payment closed.
+     *
+     * @generated from enum value: DUNNING_STAGE_NONE = 1;
+     */
+    NONE = 1,
+    /**
+     * Day 0 — the provider's charge failed and it is retrying on its own
+     * schedule. Full service continues; the customer is told, and nothing else
+     * happens.
+     *
+     * @generated from enum value: DUNNING_STAGE_PAST_DUE = 2;
+     */
+    PAST_DUE = 2,
+    /**
+     * Day 3 — still unpaid, and the mail now names the date service will be
+     * limited. Full service continues.
+     *
+     * @generated from enum value: DUNNING_STAGE_WARNED = 3;
+     */
+    WARNED = 3,
+    /**
+     * Day 7 — NEW jobs are refused. Everything already queued or running
+     * finishes, playback keeps serving, and the dashboard stays fully readable.
+     *
+     * @generated from enum value: DUNNING_STAGE_SOFT_LIMITED = 4;
+     */
+    SOFT_LIMITED = 4,
+    /**
+     * Day 14 — the organization is suspended: API keys refused, public playback
+     * stopped. Dashboard reads stay open and Cancel stays allowed, so a suspended
+     * customer can still see what they owe, pay it, and stop their own meter.
+     *
+     * @generated from enum value: DUNNING_STAGE_SUSPENDED = 5;
+     */
+    SUSPENDED = 5,
+    /**
+     * Day 45 — the T-14 notice naming the exact date stored media goes. Nothing
+     * new is enforced here; the mail IS the event.
+     *
+     * @generated from enum value: DUNNING_STAGE_DELETION_WARNED = 6;
+     */
+    DELETION_WARNED = 6,
+    /**
+     * Day 60 — statements marked uncollectible, ledger entries flagged, stored
+     * media eligible for deletion. The organization stays suspended. Terminal for
+     * this episode.
+     *
+     * Also the state an operator's manual write-off produces: the same end state,
+     * reached earlier and by a human. Which of the two happened is answered by
+     * the audit log, not by this field.
+     *
+     * @generated from enum value: DUNNING_STAGE_WRITTEN_OFF = 7;
+     */
+    WRITTEN_OFF = 7
+}
 /**
  * Pagination request parameters.
  *
@@ -618,8 +747,12 @@ declare class CreateAPIKeyRequest extends Message<CreateAPIKeyRequest> {
      */
     expiresAt?: Timestamp;
     /**
-     * App ID to create the key for.
-     * Required when unauthenticated. Ignored when authenticated (uses the authenticated app).
+     * App ID to create the key for. API-key callers may omit it (their key's app
+     * is used) or pass their own app; a different app is rejected with
+     * PermissionDenied. Portal/JWT callers pass it to create in a specific app in
+     * their org; omitted selects the org's first active app. Still REQUIRED on
+     * the unauthenticated onboarding bootstrap path, where nothing else can name
+     * an app: omitting it there is invalid_argument (`app_id_required`).
      *
      * @generated from field: string app_id = 5;
      */
@@ -915,6 +1048,18 @@ declare class InvalidRequestError extends TranscodelyError {
 /** 412 — preconditions not met (e.g. job not cancelable in current state). */
 declare class PreconditionError extends TranscodelyError {
 }
+/**
+ * Raised by `client.uploads.putFile` when the byte transfer itself fails —
+ * a presigned PUT rejected after retries, a store that returned no ETag, or a
+ * source the SDK refuses to send (empty, over the 5 GB ceiling, a stream with
+ * no declared size). Errors from the upload RPCs themselves stay in their own
+ * classes; this one covers the part of the upload the API never sees.
+ */
+declare class UploadError extends TranscodelyError {
+}
+/** The upload's `signal` fired. The multipart upload is aborted server-side. */
+declare class UploadAbortedError extends UploadError {
+}
 /**
  * Base class for errors thrown by {@link Webhooks.constructEvent}. Unlike the
  * other SDK errors, these originate locally — the SDK never made a network
@@ -1182,6 +1327,14 @@ declare class App extends Message<App> {
      * @generated from field: optional double monthly_spend_limit_eur = 15;
      */
     monthlySpendLimitEur?: number;
+    /**
+     * Player configuration for the app's hosted player and embeds. Unset when
+     * never configured (the player uses its built-in defaults). Update via
+     * AppService.UpdatePlayerConfig.
+     *
+     * @generated from field: optional transcodely.v1.PlayerConfig player_config = 16;
+     */
+    playerConfig?: PlayerConfig;
     constructor(data?: PartialMessage<App>);
     static readonly runtime: typeof proto3;
     static readonly typeName = "transcodely.v1.App";
@@ -1191,6 +1344,122 @@ declare class App extends Message<App> {
     static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): App;
     static equals(a: App | PlainMessage<App> | undefined, b: App | PlainMessage<App> | undefined): boolean;
 }
+/**
+ * Player configuration: how the hosted player and embeds present every video
+ * in the app. All fields are optional; an unset field keeps the player's
+ * built-in default.
+ *
+ * @generated from message transcodely.v1.PlayerConfig
+ */
+declare class PlayerConfig extends Message<PlayerConfig> {
+    /**
+     * Caption (subtitle) rendering style.
+     *
+     * @generated from field: optional transcodely.v1.CaptionStyle captions = 1;
+     */
+    captions?: CaptionStyle;
+    constructor(data?: PartialMessage<PlayerConfig>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.PlayerConfig";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): PlayerConfig;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): PlayerConfig;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): PlayerConfig;
+    static equals(a: PlayerConfig | PlainMessage<PlayerConfig> | undefined, b: PlayerConfig | PlainMessage<PlayerConfig> | undefined): boolean;
+}
+/**
+ * Caption rendering style for the hosted player. Colors are 6-digit hex with
+ * a leading '#' (e.g. "#0a0a0a"). On update: an unset field keeps its stored
+ * value, an empty string clears a color back to the player default, and a
+ * numeric field returns to default when set to the documented default value.
+ *
+ * @generated from message transcodely.v1.CaptionStyle
+ */
+declare class CaptionStyle extends Message<CaptionStyle> {
+    /**
+     * Cue box background color. Player default: "#0a0a0a". Empty string clears.
+     *
+     * @generated from field: optional string background_color = 1;
+     */
+    backgroundColor?: string;
+    /**
+     * Cue box background opacity, 0 (fully transparent) to 1 (solid).
+     * Player default: 0.7.
+     *
+     * @generated from field: optional double background_opacity = 2;
+     */
+    backgroundOpacity?: number;
+    /**
+     * Caption text color. Player default: "#ffffff". Empty string clears.
+     *
+     * @generated from field: optional string text_color = 3;
+     */
+    textColor?: string;
+    /**
+     * Caption text size multiplier applied to the player's responsive base
+     * size: 0.5 (half) to 2 (double). Player default: 1.
+     *
+     * @generated from field: optional double font_scale = 4;
+     */
+    fontScale?: number;
+    constructor(data?: PartialMessage<CaptionStyle>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.CaptionStyle";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): CaptionStyle;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): CaptionStyle;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): CaptionStyle;
+    static equals(a: CaptionStyle | PlainMessage<CaptionStyle> | undefined, b: CaptionStyle | PlainMessage<CaptionStyle> | undefined): boolean;
+}
+/**
+ * Request to update player configuration for an app.
+ *
+ * @generated from message transcodely.v1.UpdatePlayerConfigRequest
+ */
+declare class UpdatePlayerConfigRequest extends Message<UpdatePlayerConfigRequest> {
+    /**
+     * App ID.
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * Player configuration to merge. Fields present here overwrite the stored
+     * value; absent fields are left unchanged.
+     *
+     * @generated from field: transcodely.v1.PlayerConfig player_config = 2;
+     */
+    playerConfig?: PlayerConfig;
+    constructor(data?: PartialMessage<UpdatePlayerConfigRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.UpdatePlayerConfigRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): UpdatePlayerConfigRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): UpdatePlayerConfigRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): UpdatePlayerConfigRequest;
+    static equals(a: UpdatePlayerConfigRequest | PlainMessage<UpdatePlayerConfigRequest> | undefined, b: UpdatePlayerConfigRequest | PlainMessage<UpdatePlayerConfigRequest> | undefined): boolean;
+}
+/**
+ * Response from updating player configuration.
+ *
+ * @generated from message transcodely.v1.UpdatePlayerConfigResponse
+ */
+declare class UpdatePlayerConfigResponse extends Message<UpdatePlayerConfigResponse> {
+    /**
+     * The updated app with merged player config.
+     *
+     * @generated from field: transcodely.v1.App app = 1;
+     */
+    app?: App;
+    constructor(data?: PartialMessage<UpdatePlayerConfigResponse>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.UpdatePlayerConfigResponse";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): UpdatePlayerConfigResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): UpdatePlayerConfigResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): UpdatePlayerConfigResponse;
+    static equals(a: UpdatePlayerConfigResponse | PlainMessage<UpdatePlayerConfigResponse> | undefined, b: UpdatePlayerConfigResponse | PlainMessage<UpdatePlayerConfigResponse> | undefined): boolean;
+}
 /**
  * Request to create a new app.
  *
@@ -1479,13 +1748,22 @@ declare class EnableHostingResponse extends Message<EnableHostingResponse> {
  */
 declare class HostingConfig extends Message<HostingConfig> {
     /**
-     * Default visibility for new uploads: "public", "unlisted", or "private".
+     * Default visibility for videos this app creates: "public", "unlisted", or
+     * "private". Applies to every creation path — CreateUpload,
+     * CreateMultipartUpload, CreateFromUrl and the video a managed CreateJob
+     * produces — whenever the request itself does not name a visibility. Unset
+     * means "unlisted".
      *
      * @generated from field: optional string default_visibility = 1;
      */
     defaultVisibility?: string;
     /**
-     * Max upload file size in bytes (0 = no limit).
+     * Max upload file size in bytes (0 = no limit). Enforced at CreateUpload and
+     * CreateMultipartUpload against the request's declared size_bytes, on top of
+     * the fixed 5 GB per-request ceiling; over-limit requests are rejected with
+     * error code "max_upload_size_exceeded" before anything is created. Not
+     * enforced by CreateFromUrl, whose source size is unknown until the worker
+     * fetches the URL.
      *
      * @generated from field: optional int64 max_upload_size_bytes = 2;
      */
@@ -1875,7 +2153,105 @@ declare enum InvoiceLineType {
      *
      * @generated from enum value: INVOICE_LINE_TYPE_ADJUSTMENT = 4;
      */
-    ADJUSTMENT = 4
+    ADJUSTMENT = 4,
+    /**
+     * Metered hosting: managed storage (GB, averaged over the covered days) and
+     * CDN delivery (GB egressed), one line per app and service. dimensions
+     * carries {"app_id", "service": "storage"|"egress", "covered_from",
+     * "covered_through"} — the coverage window rolls with the meter, so the last
+     * day or so of a period appears on the next statement rather than this one.
+     *
+     * @generated from enum value: INVOICE_LINE_TYPE_HOSTING = 5;
+     */
+    HOSTING = 5
+}
+/**
+ * How much unbilled usage an organization's payment history earns it.
+ *
+ * Derived from the number of statements it has paid, never stored, and it only
+ * ever moves upward as payments land. It is not a customer segment, a plan, or
+ * anything anyone is told about beyond the billing page: its single job is to
+ * answer "how much work should we run for this account before asking to be
+ * paid".
+ *
+ * @generated from enum transcodely.v1.TrustTier
+ */
+declare enum TrustTier {
+    /**
+     * @generated from enum value: TRUST_TIER_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * No settled payments yet. Every account starts here, including the ones that
+     * go on to spend thousands.
+     *
+     * @generated from enum value: TRUST_TIER_NEW = 1;
+     */
+    NEW = 1,
+    /**
+     * One or two settled payments.
+     *
+     * @generated from enum value: TRUST_TIER_ESTABLISHED = 2;
+     */
+    ESTABLISHED = 2,
+    /**
+     * Three or more settled payments. The tier imposes NO threshold of its own —
+     * the account falls through to whatever ceiling its plan sets, which for most
+     * accounts is none. This is where the ladder is meant to end up.
+     *
+     * @generated from enum value: TRUST_TIER_PROVEN = 3;
+     */
+    PROVEN = 3
+}
+/**
+ * Which rung supplied an organization's outstanding-balance threshold.
+ *
+ * Same purpose as LimitSource on the usage ladder: "€50" reads very differently
+ * depending on whether changing it means an operator editing this organization,
+ * editing its plan, or the account simply paying an invoice.
+ *
+ * @generated from enum transcodely.v1.ExposureThresholdSource
+ */
+declare enum ExposureThresholdSource {
+    /**
+     * @generated from enum value: EXPOSURE_THRESHOLD_SOURCE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * An operator set this organization's threshold by hand. Audited, and the
+     * only rung that can RAISE a threshold above what the tier would give.
+     *
+     * @generated from enum value: EXPOSURE_THRESHOLD_SOURCE_OVERRIDE = 1;
+     */
+    OVERRIDE = 1,
+    /**
+     * The trust tier's own number — the everyday answer.
+     *
+     * @generated from enum value: EXPOSURE_THRESHOLD_SOURCE_TRUST_TIER = 2;
+     */
+    TRUST_TIER = 2,
+    /**
+     * The monthly spend ceiling on the organization's plan. It joins by MINIMUM,
+     * so a plan can only ever tighten what the tier or an operator allowed:
+     * carrying more unbilled usage than an account is permitted to spend in a
+     * month would be extending credit past the amount it may run up at all.
+     *
+     * @generated from enum value: EXPOSURE_THRESHOLD_SOURCE_ORG_PLAN = 3;
+     */
+    ORG_PLAN = 3,
+    /**
+     * The platform-wide default ceiling.
+     *
+     * @generated from enum value: EXPOSURE_THRESHOLD_SOURCE_PLATFORM_DEFAULT = 4;
+     */
+    PLATFORM_DEFAULT = 4,
+    /**
+     * Every rung declined: no threshold applies, no reminders are sent and
+     * admission is never refused for this reason.
+     *
+     * @generated from enum value: EXPOSURE_THRESHOLD_SOURCE_UNBOUNDED = 5;
+     */
+    UNBOUNDED = 5
 }
 /**
  * Whether an organization has a payment method the provider can charge.
@@ -2276,15 +2652,35 @@ declare class BillingPortalSession extends Message<BillingPortalSession> {
      * Where to send the browser. Single-use and short-lived; request a new
      * session rather than storing this.
      *
+     * Points at the portal's settings section, where payment methods are managed,
+     * rather than at its landing page.
+     *
      * @generated from field: string url = 2;
      */
     url: string;
     /**
-     * When the session stops working.
+     * When the session stops working. Applies to url and session_token alike —
+     * they are two ways into the same session.
      *
      * @generated from field: google.protobuf.Timestamp expires_at = 3;
      */
     expiresAt?: Timestamp;
+    /**
+     * Short-lived (~1h), single-customer-scoped token for the provider's embedded
+     * payment-method form, so a card can be added in place instead of by
+     * redirecting to the hosted portal.
+     *
+     * Same trust level as `url`, which reaches the same portal as the same
+     * customer with no further authentication. It is still a bare credential:
+     * hand it to the embed, never log or store it, and request a new session
+     * instead of reusing one.
+     *
+     * Empty when the configured provider exposes no such token; fall back to
+     * opening `url`.
+     *
+     * @generated from field: string session_token = 4;
+     */
+    sessionToken: string;
     constructor(data?: PartialMessage<BillingPortalSession>);
     static readonly runtime: typeof proto3;
     static readonly typeName = "transcodely.v1.BillingPortalSession";
@@ -2295,85 +2691,378 @@ declare class BillingPortalSession extends Message<BillingPortalSession> {
     static equals(a: BillingPortalSession | PlainMessage<BillingPortalSession> | undefined, b: BillingPortalSession | PlainMessage<BillingPortalSession> | undefined): boolean;
 }
 /**
- * Request to list the organization's invoices.
+ * An organization's monthly budget and the spend it is measured against.
  *
- * @generated from message transcodely.v1.ListInvoicesRequest
+ * A budget is the customer's OWN telemetry: it exists so an account can be told
+ * it is spending more than it meant to. It NEVER enforces anything. Crossing
+ * 100% of a budget sends an email and changes nothing else — no job is
+ * rejected, no video stops playing, no limit is applied.
+ *
+ * It is not the per-app spend LIMIT (App.monthly_spend_limit_eur, set via
+ * AppService.UpdateSpendLimit), which IS a hard cap: at 100% of a spend limit,
+ * new jobs are refused. Limits block; budgets notify. An organization can use
+ * either, both, or neither.
+ *
+ * @generated from message transcodely.v1.Budget
  */
-declare class ListInvoicesRequest extends Message<ListInvoicesRequest> {
+declare class Budget extends Message<Budget> {
     /**
-     * Pagination parameters.
+     * Object type, always "budget".
      *
-     * @generated from field: transcodely.v1.PaginationRequest pagination = 1;
+     * @generated from field: string object = 1;
      */
-    pagination?: PaginationRequest;
-    constructor(data?: PartialMessage<ListInvoicesRequest>);
-    static readonly runtime: typeof proto3;
-    static readonly typeName = "transcodely.v1.ListInvoicesRequest";
-    static readonly fields: FieldList;
-    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): ListInvoicesRequest;
-    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): ListInvoicesRequest;
-    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): ListInvoicesRequest;
-    static equals(a: ListInvoicesRequest | PlainMessage<ListInvoicesRequest> | undefined, b: ListInvoicesRequest | PlainMessage<ListInvoicesRequest> | undefined): boolean;
-}
-/**
- * Response from listing invoices.
- *
- * @generated from message transcodely.v1.ListInvoicesResponse
- */
-declare class ListInvoicesResponse extends Message<ListInvoicesResponse> {
+    object: string;
     /**
-     * Invoices, newest period first. Line items are omitted here; fetch a single
-     * invoice to get them.
+     * Organization this budget belongs to.
      *
-     * @generated from field: repeated transcodely.v1.Invoice invoices = 1;
+     * @generated from field: string org_id = 2;
      */
-    invoices: Invoice[];
+    orgId: string;
     /**
-     * Pagination metadata.
+     * The monthly budget in EUR. Absent when no budget is set, which is the
+     * default and means no alerts are sent.
      *
-     * @generated from field: transcodely.v1.PaginationResponse pagination = 2;
+     * @generated from field: optional double amount_eur = 3;
      */
-    pagination?: PaginationResponse;
-    constructor(data?: PartialMessage<ListInvoicesResponse>);
-    static readonly runtime: typeof proto3;
-    static readonly typeName = "transcodely.v1.ListInvoicesResponse";
-    static readonly fields: FieldList;
-    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): ListInvoicesResponse;
-    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): ListInvoicesResponse;
-    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): ListInvoicesResponse;
-    static equals(a: ListInvoicesResponse | PlainMessage<ListInvoicesResponse> | undefined, b: ListInvoicesResponse | PlainMessage<ListInvoicesResponse> | undefined): boolean;
-}
-/**
- * Request to retrieve one invoice.
- *
- * @generated from message transcodely.v1.GetInvoiceRequest
- */
-declare class GetInvoiceRequest extends Message<GetInvoiceRequest> {
+    amountEur?: number;
     /**
-     * Invoice ID (e.g., "inv_a1b2c3d4e5f6").
+     * Spend so far in the current billing period, in EUR.
      *
-     * @generated from field: string id = 1;
+     * This is the same ledger, over the same window, that GetUpcomingInvoice
+     * reports — it covers transcoding AND hosting for every app in the
+     * organization, and it excludes usage that will never be billed. It is
+     * therefore NOT the same number as AppService.GetSpend, which is scoped to
+     * one app, counts estimates for jobs still running, and knows nothing about
+     * hosting.
+     *
+     * @generated from field: double spent_eur = 4;
      */
-    id: string;
-    constructor(data?: PartialMessage<GetInvoiceRequest>);
+    spentEur: number;
+    /**
+     * spent_eur as a percentage of amount_eur. Absent when no budget is set.
+     * Not capped at 100: an organization at 240% of its budget is shown 240.
+     *
+     * @generated from field: optional double used_percent = 5;
+     */
+    usedPercent?: number;
+    /**
+     * Start of the current billing period (inclusive), UTC.
+     *
+     * @generated from field: google.protobuf.Timestamp period_start = 6;
+     */
+    periodStart?: Timestamp;
+    /**
+     * End of the current billing period (exclusive), UTC. Spend resets here.
+     *
+     * @generated from field: google.protobuf.Timestamp period_end = 7;
+     */
+    periodEnd?: Timestamp;
+    /**
+     * The percentage steps that send an alert email, ascending. Fixed at
+     * 50, 80 and 100 today; new steps may be added.
+     *
+     * @generated from field: repeated int32 alert_steps = 8;
+     */
+    alertSteps: number[];
+    /**
+     * The steps already emailed this billing period, ascending. Fire-once per
+     * period: a step listed here does not send again, and changing the budget
+     * mid-period does not re-arm it. Empty at the start of every period.
+     *
+     * @generated from field: repeated int32 notified_steps = 9;
+     */
+    notifiedSteps: number[];
+    /**
+     * ISO 4217 currency code for every amount here. Always "EUR" today.
+     *
+     * @generated from field: string currency = 10;
+     */
+    currency: string;
+    constructor(data?: PartialMessage<Budget>);
     static readonly runtime: typeof proto3;
-    static readonly typeName = "transcodely.v1.GetInvoiceRequest";
+    static readonly typeName = "transcodely.v1.Budget";
     static readonly fields: FieldList;
-    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): GetInvoiceRequest;
-    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): GetInvoiceRequest;
-    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): GetInvoiceRequest;
-    static equals(a: GetInvoiceRequest | PlainMessage<GetInvoiceRequest> | undefined, b: GetInvoiceRequest | PlainMessage<GetInvoiceRequest> | undefined): boolean;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): Budget;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): Budget;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): Budget;
+    static equals(a: Budget | PlainMessage<Budget> | undefined, b: Budget | PlainMessage<Budget> | undefined): boolean;
 }
 /**
- * Response from retrieving an invoice.
+ * An organization's unsettled balance and the threshold it is measured against.
  *
- * @generated from message transcodely.v1.GetInvoiceResponse
+ * # What the number is
+ *
+ * Usage that has been accrued and NOT yet captured onto a statement —
+ * transcoding and hosting, across every app in the organization. Paying a
+ * statement, or settling mid-cycle, resets it to zero.
+ *
+ * It is a different number from all three of its neighbours, and the
+ * differences matter:
+ *
+ *   - GetUpcomingInvoice shows what THIS PERIOD has accrued. This shows what is
+ *     UNSETTLED, which also carries anything an earlier period left uncaptured.
+ *   - Budget.spent_eur keeps counting after an invoice is issued, because spend
+ *     does not un-happen when it is billed. This drops to zero when it is.
+ *   - App.monthly_spend_limit_eur is a cap the customer sets on one app for
+ *     themselves. This is the platform's own exposure control over the whole
+ *     organization, and no calendar clears it — only payment does.
+ *
+ * # What happens as it climbs
+ *
+ * Nothing, for a long time. Reminder emails go out at 80%, 100%, 125%, 150% and
+ * 175% of the threshold and NOTHING is restricted at any of them: service
+ * continues past the threshold on purpose, so that a busy month never stops a
+ * pipeline without warning. Only at `hard_stop_cents` — twice the threshold —
+ * are new jobs refused, with error code "outstanding_balance_exceeded".
+ *
+ * Even then, work already queued or running finishes, outputs are delivered,
+ * videos keep playing, uploads keep working and jobs can still be canceled.
+ * Paying lifts the block on the very next request.
+ *
+ * @generated from message transcodely.v1.OutstandingBalance
  */
-declare class GetInvoiceResponse extends Message<GetInvoiceResponse> {
+declare class OutstandingBalance extends Message<OutstandingBalance> {
     /**
-     * The requested invoice, with its line items.
+     * Object type, always "outstanding_balance".
      *
-     * @generated from field: transcodely.v1.Invoice invoice = 1;
+     * @generated from field: string object = 1;
+     */
+    object: string;
+    /**
+     * Organization this balance belongs to.
+     *
+     * @generated from field: string org_id = 2;
+     */
+    orgId: string;
+    /**
+     * The unsettled amount, in integer minor units (cents) of `currency`.
+     * Rendered as a JSON string per the protobuf 64-bit integer mapping.
+     *
+     * @generated from field: int64 outstanding_cents = 3;
+     */
+    outstandingCents: bigint;
+    /**
+     * The trust tier the organization's payment history puts it on, which is what
+     * sets the threshold unless an operator or a plan overrides it.
+     *
+     * @generated from field: transcodely.v1.TrustTier tier = 4;
+     */
+    tier: TrustTier;
+    /**
+     * How many statements this organization has PAID. The input behind `tier`,
+     * surfaced so the path to a higher threshold is visible rather than implied.
+     * A mid-cycle settlement counts once it is paid, like any other statement.
+     *
+     * @generated from field: int64 settled_payments = 5;
+     */
+    settledPayments: bigint;
+    /**
+     * The threshold, in cents. Absent when no threshold applies at all — a
+     * long-standing account with no plan ceiling has none, which is the intended
+     * destination of the whole ladder.
+     *
+     * @generated from field: optional int64 threshold_cents = 6;
+     */
+    thresholdCents?: bigint;
+    /**
+     * Which rung supplied `threshold_cents`.
+     *
+     * @generated from field: transcodely.v1.ExposureThresholdSource threshold_source = 7;
+     */
+    thresholdSource: ExposureThresholdSource;
+    /**
+     * The amount at which new-job admission stops: twice `threshold_cents`.
+     * Absent exactly when `threshold_cents` is.
+     *
+     * @generated from field: optional int64 hard_stop_cents = 8;
+     */
+    hardStopCents?: bigint;
+    /**
+     * Whether new jobs are being refused right now. Reads the same numbers the
+     * admission gate reads, so a card showing false cannot coexist with a create
+     * being rejected for this reason.
+     *
+     * @generated from field: bool blocked = 9;
+     */
+    blocked: boolean;
+    /**
+     * `outstanding_cents` as a percentage of `threshold_cents`. Absent when no
+     * threshold applies. Not capped at 100: an organization at 180% is shown 180.
+     *
+     * @generated from field: optional double used_percent = 10;
+     */
+    usedPercent?: number;
+    /**
+     * The percentage steps that send a reminder email, ascending. 80, 100, 125,
+     * 150, 175 and 200 today; the last one is where admission stops.
+     *
+     * @generated from field: repeated int32 alert_steps = 11;
+     */
+    alertSteps: number[];
+    /**
+     * The steps already emailed for the current accrual window, ascending.
+     * Fire-once: a step listed here does not send again until the balance is
+     * settled or the billing period rolls.
+     *
+     * @generated from field: repeated int32 notified_steps = 12;
+     */
+    notifiedSteps: number[];
+    /**
+     * ISO 4217 currency code for every amount here. Always "EUR" today.
+     *
+     * @generated from field: string currency = 13;
+     */
+    currency: string;
+    /**
+     * Whether SettleOutstandingBalance is available on this deployment. False
+     * while the settlement rail is disabled — a billing page should not render a
+     * "pay now" action that can only fail.
+     *
+     * @generated from field: bool settlement_available = 14;
+     */
+    settlementAvailable: boolean;
+    constructor(data?: PartialMessage<OutstandingBalance>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.OutstandingBalance";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): OutstandingBalance;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): OutstandingBalance;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): OutstandingBalance;
+    static equals(a: OutstandingBalance | PlainMessage<OutstandingBalance> | undefined, b: OutstandingBalance | PlainMessage<OutstandingBalance> | undefined): boolean;
+}
+/**
+ * A statement produced by paying an outstanding balance mid-cycle.
+ *
+ * @generated from message transcodely.v1.Settlement
+ */
+declare class Settlement extends Message<Settlement> {
+    /**
+     * Object type, always "settlement".
+     *
+     * @generated from field: string object = 1;
+     */
+    object: string;
+    /**
+     * The statement the balance was captured onto. It is an ordinary invoice —
+     * readable through GetInvoice, listed by ListInvoices, and paid through the
+     * same provider flow as any other.
+     *
+     * @generated from field: string invoice_id = 2;
+     */
+    invoiceId: string;
+    /**
+     * What it came to, in integer minor units (cents).
+     *
+     * @generated from field: int64 amount_cents = 3;
+     */
+    amountCents: bigint;
+    /**
+     * The window the statement covers, UTC. It starts where the previous
+     * statement ended (or at the period start) and ends at the settlement
+     * instant.
+     *
+     * @generated from field: google.protobuf.Timestamp period_start = 4;
+     */
+    periodStart?: Timestamp;
+    /**
+     * @generated from field: google.protobuf.Timestamp period_end = 5;
+     */
+    periodEnd?: Timestamp;
+    /**
+     * ISO 4217 currency code. Always "EUR" today.
+     *
+     * @generated from field: string currency = 6;
+     */
+    currency: string;
+    constructor(data?: PartialMessage<Settlement>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.Settlement";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): Settlement;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): Settlement;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): Settlement;
+    static equals(a: Settlement | PlainMessage<Settlement> | undefined, b: Settlement | PlainMessage<Settlement> | undefined): boolean;
+}
+/**
+ * Request to list the organization's invoices.
+ *
+ * @generated from message transcodely.v1.ListInvoicesRequest
+ */
+declare class ListInvoicesRequest extends Message<ListInvoicesRequest> {
+    /**
+     * Pagination parameters.
+     *
+     * @generated from field: transcodely.v1.PaginationRequest pagination = 1;
+     */
+    pagination?: PaginationRequest;
+    constructor(data?: PartialMessage<ListInvoicesRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.ListInvoicesRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): ListInvoicesRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): ListInvoicesRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): ListInvoicesRequest;
+    static equals(a: ListInvoicesRequest | PlainMessage<ListInvoicesRequest> | undefined, b: ListInvoicesRequest | PlainMessage<ListInvoicesRequest> | undefined): boolean;
+}
+/**
+ * Response from listing invoices.
+ *
+ * @generated from message transcodely.v1.ListInvoicesResponse
+ */
+declare class ListInvoicesResponse extends Message<ListInvoicesResponse> {
+    /**
+     * Invoices, newest period first. Line items are omitted here; fetch a single
+     * invoice to get them.
+     *
+     * @generated from field: repeated transcodely.v1.Invoice invoices = 1;
+     */
+    invoices: Invoice[];
+    /**
+     * Pagination metadata.
+     *
+     * @generated from field: transcodely.v1.PaginationResponse pagination = 2;
+     */
+    pagination?: PaginationResponse;
+    constructor(data?: PartialMessage<ListInvoicesResponse>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.ListInvoicesResponse";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): ListInvoicesResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): ListInvoicesResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): ListInvoicesResponse;
+    static equals(a: ListInvoicesResponse | PlainMessage<ListInvoicesResponse> | undefined, b: ListInvoicesResponse | PlainMessage<ListInvoicesResponse> | undefined): boolean;
+}
+/**
+ * Request to retrieve one invoice.
+ *
+ * @generated from message transcodely.v1.GetInvoiceRequest
+ */
+declare class GetInvoiceRequest extends Message<GetInvoiceRequest> {
+    /**
+     * Invoice ID (e.g., "inv_a1b2c3d4e5f6").
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    constructor(data?: PartialMessage<GetInvoiceRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.GetInvoiceRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): GetInvoiceRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): GetInvoiceRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): GetInvoiceRequest;
+    static equals(a: GetInvoiceRequest | PlainMessage<GetInvoiceRequest> | undefined, b: GetInvoiceRequest | PlainMessage<GetInvoiceRequest> | undefined): boolean;
+}
+/**
+ * Response from retrieving an invoice.
+ *
+ * @generated from message transcodely.v1.GetInvoiceResponse
+ */
+declare class GetInvoiceResponse extends Message<GetInvoiceResponse> {
+    /**
+     * The requested invoice, with its line items.
+     *
+     * @generated from field: transcodely.v1.Invoice invoice = 1;
      */
     invoice?: Invoice;
     constructor(data?: PartialMessage<GetInvoiceResponse>);
@@ -2497,9 +3186,185 @@ declare class CreateBillingPortalSessionResponse extends Message<CreateBillingPo
     static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): CreateBillingPortalSessionResponse;
     static equals(a: CreateBillingPortalSessionResponse | PlainMessage<CreateBillingPortalSessionResponse> | undefined, b: CreateBillingPortalSessionResponse | PlainMessage<CreateBillingPortalSessionResponse> | undefined): boolean;
 }
+/**
+ * Request to read the organization's monthly budget. The organization is taken
+ * from the X-Organization-ID header.
+ *
+ * @generated from message transcodely.v1.GetBudgetRequest
+ */
+declare class GetBudgetRequest extends Message<GetBudgetRequest> {
+    constructor(data?: PartialMessage<GetBudgetRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.GetBudgetRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): GetBudgetRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): GetBudgetRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): GetBudgetRequest;
+    static equals(a: GetBudgetRequest | PlainMessage<GetBudgetRequest> | undefined, b: GetBudgetRequest | PlainMessage<GetBudgetRequest> | undefined): boolean;
+}
+/**
+ * Response carrying the budget and the spend it is measured against.
+ *
+ * @generated from message transcodely.v1.GetBudgetResponse
+ */
+declare class GetBudgetResponse extends Message<GetBudgetResponse> {
+    /**
+     * The budget. Always present: an organization with no budget set gets one
+     * with amount_eur absent and spent_eur still populated, so the current
+     * period's spend can be shown before a budget exists.
+     *
+     * @generated from field: transcodely.v1.Budget budget = 1;
+     */
+    budget?: Budget;
+    constructor(data?: PartialMessage<GetBudgetResponse>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.GetBudgetResponse";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): GetBudgetResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): GetBudgetResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): GetBudgetResponse;
+    static equals(a: GetBudgetResponse | PlainMessage<GetBudgetResponse> | undefined, b: GetBudgetResponse | PlainMessage<GetBudgetResponse> | undefined): boolean;
+}
+/**
+ * Request to set or clear the organization's monthly budget. The organization
+ * is taken from the X-Organization-ID header.
+ *
+ * @generated from message transcodely.v1.UpdateBudgetRequest
+ */
+declare class UpdateBudgetRequest extends Message<UpdateBudgetRequest> {
+    /**
+     * Monthly budget in EUR. When present, sets the budget (must be > 0). When
+     * ABSENT, the budget is cleared and no further alerts are sent — that is the
+     * only way to turn them off. The upper bound matches the NUMERIC(12,2)
+     * storage column.
+     *
+     * @generated from field: optional double amount_eur = 1;
+     */
+    amountEur?: number;
+    constructor(data?: PartialMessage<UpdateBudgetRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.UpdateBudgetRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): UpdateBudgetRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): UpdateBudgetRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): UpdateBudgetRequest;
+    static equals(a: UpdateBudgetRequest | PlainMessage<UpdateBudgetRequest> | undefined, b: UpdateBudgetRequest | PlainMessage<UpdateBudgetRequest> | undefined): boolean;
+}
+/**
+ * Response from setting or clearing a budget.
+ *
+ * @generated from message transcodely.v1.UpdateBudgetResponse
+ */
+declare class UpdateBudgetResponse extends Message<UpdateBudgetResponse> {
+    /**
+     * The budget as it now stands, with current-period spend recomputed, so a
+     * caller that just moved the number can render the new bar without a second
+     * request. amount_eur is absent when the budget was cleared.
+     *
+     * @generated from field: transcodely.v1.Budget budget = 1;
+     */
+    budget?: Budget;
+    constructor(data?: PartialMessage<UpdateBudgetResponse>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.UpdateBudgetResponse";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): UpdateBudgetResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): UpdateBudgetResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): UpdateBudgetResponse;
+    static equals(a: UpdateBudgetResponse | PlainMessage<UpdateBudgetResponse> | undefined, b: UpdateBudgetResponse | PlainMessage<UpdateBudgetResponse> | undefined): boolean;
+}
+/**
+ * Request to read the organization's outstanding balance. The organization is
+ * taken from the X-Organization-ID header.
+ *
+ * @generated from message transcodely.v1.GetOutstandingBalanceRequest
+ */
+declare class GetOutstandingBalanceRequest extends Message<GetOutstandingBalanceRequest> {
+    constructor(data?: PartialMessage<GetOutstandingBalanceRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.GetOutstandingBalanceRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): GetOutstandingBalanceRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): GetOutstandingBalanceRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): GetOutstandingBalanceRequest;
+    static equals(a: GetOutstandingBalanceRequest | PlainMessage<GetOutstandingBalanceRequest> | undefined, b: GetOutstandingBalanceRequest | PlainMessage<GetOutstandingBalanceRequest> | undefined): boolean;
+}
+/**
+ * Response carrying the outstanding balance and its threshold.
+ *
+ * @generated from message transcodely.v1.GetOutstandingBalanceResponse
+ */
+declare class GetOutstandingBalanceResponse extends Message<GetOutstandingBalanceResponse> {
+    /**
+     * Always present. An organization that owes nothing gets one with
+     * outstanding_cents 0 and its threshold still populated, so a card can show
+     * the headroom before anything has been spent.
+     *
+     * @generated from field: transcodely.v1.OutstandingBalance balance = 1;
+     */
+    balance?: OutstandingBalance;
+    constructor(data?: PartialMessage<GetOutstandingBalanceResponse>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.GetOutstandingBalanceResponse";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): GetOutstandingBalanceResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): GetOutstandingBalanceResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): GetOutstandingBalanceResponse;
+    static equals(a: GetOutstandingBalanceResponse | PlainMessage<GetOutstandingBalanceResponse> | undefined, b: GetOutstandingBalanceResponse | PlainMessage<GetOutstandingBalanceResponse> | undefined): boolean;
+}
+/**
+ * Request to settle the outstanding balance now. The organization is taken from
+ * the X-Organization-ID header.
+ *
+ * It carries no amount ON PURPOSE. The figure is whatever the ledger says at the
+ * instant the settlement runs, and letting a caller name its own number would
+ * let a stale page pay less than is owed and leave the difference looking
+ * settled.
+ *
+ * @generated from message transcodely.v1.SettleOutstandingBalanceRequest
+ */
+declare class SettleOutstandingBalanceRequest extends Message<SettleOutstandingBalanceRequest> {
+    constructor(data?: PartialMessage<SettleOutstandingBalanceRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.SettleOutstandingBalanceRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): SettleOutstandingBalanceRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): SettleOutstandingBalanceRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): SettleOutstandingBalanceRequest;
+    static equals(a: SettleOutstandingBalanceRequest | PlainMessage<SettleOutstandingBalanceRequest> | undefined, b: SettleOutstandingBalanceRequest | PlainMessage<SettleOutstandingBalanceRequest> | undefined): boolean;
+}
+/**
+ * Response from settling an outstanding balance.
+ *
+ * @generated from message transcodely.v1.SettleOutstandingBalanceResponse
+ */
+declare class SettleOutstandingBalanceResponse extends Message<SettleOutstandingBalanceResponse> {
+    /**
+     * The statement that was produced.
+     *
+     * @generated from field: transcodely.v1.Settlement settlement = 1;
+     */
+    settlement?: Settlement;
+    /**
+     * The balance as it now stands — zero, with the block lifted and the steps
+     * re-armed — so a caller that just paid can render the new state without a
+     * second request.
+     *
+     * @generated from field: transcodely.v1.OutstandingBalance balance = 2;
+     */
+    balance?: OutstandingBalance;
+    constructor(data?: PartialMessage<SettleOutstandingBalanceResponse>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.SettleOutstandingBalanceResponse";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): SettleOutstandingBalanceResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): SettleOutstandingBalanceResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): SettleOutstandingBalanceResponse;
+    static equals(a: SettleOutstandingBalanceResponse | PlainMessage<SettleOutstandingBalanceResponse> | undefined, b: SettleOutstandingBalanceResponse | PlainMessage<SettleOutstandingBalanceResponse> | undefined): boolean;
+}
 
 /**
- * An organization's billing statements — read-only.
+ * An organization's money: statements, budget, and outstanding balance.
  *
  * Unlike every other namespace, billing settles a whole organization rather
  * than a single app, so it is **not** available to API-key callers: a key is
@@ -2518,7 +3383,10 @@ declare class CreateBillingPortalSessionResponse extends Message<CreateBillingPo
  * ```
  *
  * Invoices are generated automatically when a period closes. There is no API to
- * create, edit, or delete one — a statement records what happened.
+ * create, edit, or delete one — a statement records what happened. The two
+ * writes here do not contradict that: {@link updateBudget} moves the customer's
+ * own alert threshold, and {@link settleOutstandingBalance} closes the period
+ * early rather than editing anything already recorded.
  */
 declare class Billing {
     private readonly transport;
@@ -2570,6 +3438,78 @@ declare class Billing {
      * than storing the URL.
      */
     createPortalSession(opts?: CallOptions): Promise<BillingPortalSession>;
+    /**
+     * Retrieve the organization's monthly budget together with the spend it is
+     * measured against — everything a budget card needs, in one call.
+     *
+     * A budget only ever **notifies**: crossing 100% sends an email and changes
+     * nothing else. The hard cap is the per-app spend limit
+     * (`client.apps.setSpendLimit`), which rejects new jobs at 100%.
+     *
+     * Always returns a budget. An organization with none set gets one with
+     * `amountEur` and `usedPercent` absent and `spentEur` still populated, so the
+     * current period's spend renders before a budget exists.
+     */
+    retrieveBudget(opts?: CallOptions): Promise<Budget>;
+    /**
+     * Set or clear the organization's monthly budget. Provide `amountEur` (must
+     * be > 0) to set it; omit it to clear the budget and stop the alert emails.
+     * {@link setBudget} and {@link clearBudget} are the ergonomic shorthands.
+     *
+     * The returned budget has current-period spend recomputed, so a caller that
+     * just moved the number can re-render without a second request.
+     */
+    updateBudget(req?: PartialMessage<UpdateBudgetRequest>, opts?: CallOptions): Promise<Budget>;
+    /**
+     * Set the organization's monthly budget in EUR (must be > 0).
+     *
+     * Alert emails fire once per billing period at each of `budget.alertSteps`
+     * (50%, 80%, 100% today). Raising or lowering the amount mid-period never
+     * re-arms a step already listed in `budget.notifiedSteps`.
+     */
+    setBudget(amountEur: number, opts?: CallOptions): Promise<Budget>;
+    /**
+     * Clear the organization's monthly budget, turning the alert emails off —
+     * omitting the optional amount is the only way to switch them off.
+     */
+    clearBudget(opts?: CallOptions): Promise<Budget>;
+    /**
+     * Retrieve the organization's outstanding balance — usage accrued but not yet
+     * captured onto a statement — together with the threshold it is measured
+     * against.
+     *
+     * Distinct from {@link retrieveUpcoming}, which reports what the **current
+     * period** has accrued: this is what is **unsettled**, so it also carries
+     * anything an earlier period left uncaptured, and it is the number that
+     * decides whether new jobs are admitted.
+     *
+     * Nothing is restricted as it climbs — reminder emails go out at 80%, 100%,
+     * 125%, 150% and 175% and service continues past the threshold on purpose.
+     * Only at `hardStopCents` (twice the threshold) are new jobs refused, with
+     * error code `outstanding_balance_exceeded`; queued and running work still
+     * finishes and playback keeps serving. Branch on `blocked`, which reads the
+     * same numbers the admission gate reads.
+     */
+    retrieveOutstandingBalance(opts?: CallOptions): Promise<OutstandingBalance>;
+    /**
+     * Pay the outstanding balance now, without waiting for the period to end.
+     *
+     * Closes the current period at this instant and produces a real statement —
+     * an ordinary invoice, readable through {@link retrieve} — which the payment
+     * provider then charges. On success the balance is zero and any admission
+     * block is lifted immediately; the response carries the refreshed balance too,
+     * so no follow-up read is needed.
+     *
+     * Takes no amount on purpose: the figure is whatever the ledger says at the
+     * instant it runs, so a stale page cannot underpay and leave the difference
+     * looking settled.
+     *
+     * Throws {@link PreconditionError} with code `settlement_unavailable` when the
+     * deployment has mid-cycle settlement switched off — check
+     * `balance.settlementAvailable` before offering a "pay now" action — and with
+     * `nothing_outstanding` when there is nothing to pay.
+     */
+    settleOutstandingBalance(opts?: CallOptions): Promise<SettleOutstandingBalanceResponse>;
 }
 
 /**
@@ -2944,7 +3884,10 @@ declare class WebhookDelivery extends Message<WebhookDelivery> {
  */
 declare class CreateWebhookEndpointRequest extends Message<CreateWebhookEndpointRequest> {
     /**
-     * App to create the endpoint for.
+     * App to create the endpoint for. API-key callers may omit it (their key's
+     * app is used) or pass their own app; a different app is rejected with
+     * PermissionDenied. Portal/JWT callers pass it to create in a specific app in
+     * their org; omitted selects the org's first active app.
      *
      * @generated from field: string app_id = 1;
      */
@@ -3173,7 +4116,10 @@ declare class DeleteWebhookEndpointResponse extends Message<DeleteWebhookEndpoin
  */
 declare class ListWebhookEndpointsRequest extends Message<ListWebhookEndpointsRequest> {
     /**
-     * App to list endpoints for.
+     * Optional app filter. API-key callers may omit it (their key's app is used)
+     * or pass their own app; a different app is rejected with PermissionDenied.
+     * Portal/JWT callers pass it to list a specific app in their org; omitted
+     * returns endpoints across all apps in the org.
      *
      * @generated from field: string app_id = 1;
      */
@@ -3283,7 +4229,10 @@ declare class RotateWebhookSecretResponse extends Message<RotateWebhookSecretRes
  */
 declare class ListEventsRequest extends Message<ListEventsRequest> {
     /**
-     * App to list events for.
+     * Optional app filter. API-key callers may omit it (their key's app is used)
+     * or pass their own app; a different app is rejected with PermissionDenied.
+     * Portal/JWT callers pass it to list a specific app in their org; omitted
+     * returns events across all apps in the org.
      *
      * @generated from field: string app_id = 1;
      */
@@ -4688,6 +5637,11 @@ declare class StreamingConfig extends Message<StreamingConfig> {
      * Example: "video_{resolution}" produces "video_1080p.m3u8"
      * Default: "{codec}_{resolution}" produces "h264_1080p.m3u8"
      *
+     * The rendered value becomes a filename and is also carried through the
+     * packager's stream descriptors, so the accepted charset is deliberately
+     * narrow: letters, digits, `_`, `-`, `.` and the `{}` that delimit template
+     * variables. No path separators, no `..`, and none of `, : ; ' " \`.
+     *
      * @generated from field: optional string hls_variant_pattern = 12;
      */
     hlsVariantPattern?: string;
@@ -4779,6 +5733,12 @@ declare class BurnInStyle extends Message<BurnInStyle> {
     /**
      * Font family name. Default: "Arial".
      *
+     * Letters, digits, spaces, `_` and `-` only. The value is embedded in the
+     * renderer's style string, where a quote, comma or semicolon would terminate
+     * it and let whatever follows parse as further styling arguments.
+     *
+     * Example: "DejaVu Sans"
+     *
      * @generated from field: optional string font_family = 1;
      */
     fontFamily?: string;
@@ -5330,10 +6290,11 @@ declare class DRMConfig extends Message<DRMConfig> {
 /**
  * Content-aware encoding mode.
  *
- * NOT YET SUPPORTED. The worker pipeline does not yet act on content-aware
- * encoding, so any output carrying a ContentAwareConfig is rejected at CreateJob
- * with error code `parameter_unsupported` (see issue #167). The enum values are
- * retained for wire compatibility and will become active when the feature ships.
+ * One of the two modes ships: `per_title` is accepted and acted on. `auto_abr`
+ * is still rejected at CreateJob with error code `parameter_unsupported` and
+ * the message "auto_abr is not available yet; per_title is" (issue #167),
+ * because it would change the NUMBER of renditions after the job was already
+ * quoted per rendition at create time.
  *
  * @generated from enum transcodely.v1.ContentAwareMode
  */
@@ -5343,15 +6304,18 @@ declare enum ContentAwareMode {
      */
     UNSPECIFIED = 0,
     /**
-     * Optimize CRF for target VMAF on specific content. NOT YET SUPPORTED —
-     * rejected at create.
+     * Find the CRF this source needs to reach the VMAF target, and encode the
+     * declared ladder at it. The search runs once per output, on the ladder's
+     * highest-resolution quality-driven rendition; the lower rungs move by the
+     * CRF offsets the ladder already declares. Priced at 1.5x. What the search
+     * decided comes back on OutputReport.content_aware.
      *
      * @generated from enum value: CONTENT_AWARE_MODE_PER_TITLE = 1;
      */
     PER_TITLE = 1,
     /**
-     * Generate optimal bitrate ladder automatically. NOT YET SUPPORTED —
-     * rejected at create.
+     * Generate the bitrate ladder automatically. NOT YET ACCEPTED — rejected at
+     * create.
      *
      * @generated from enum value: CONTENT_AWARE_MODE_AUTO_ABR = 2;
      */
@@ -5360,9 +6324,9 @@ declare enum ContentAwareMode {
 /**
  * Auto ABR ladder generation constraints.
  *
- * NOT YET SUPPORTED — see ContentAwareConfig. These constraints are validated
- * for shape but never applied, because a request carrying content_aware is
- * rejected at create.
+ * NOT YET ACCEPTED — see ContentAwareConfig. These constraints are validated
+ * for shape but never applied, because a request in auto_abr mode is rejected
+ * at create.
  *
  * @generated from message transcodely.v1.AutoABRConfig
  */
@@ -5405,35 +6369,51 @@ declare class AutoABRConfig extends Message<AutoABRConfig> {
 /**
  * Content-aware encoding configuration for an output.
  *
- * NOT YET SUPPORTED. Setting content_aware on any output causes CreateJob to
- * fail with error code `parameter_unsupported` and the message "content-aware
- * encoding (per_title/auto_abr) is not yet supported". The worker does not yet
- * implement per-title CRF optimization or auto-ABR ladder generation — both
- * modes would run the identical plain-encode path — so the API rejects the
- * request rather than silently no-op it while charging the content-aware
- * multiplier (issue #167 / transcodely/worker#90). The message and fields are
- * retained for wire compatibility and forward-planning.
+ * In `per_title` mode the encode is tuned to this particular source: the worker
+ * measures short samples of it at several CRFs and encodes the declared ladder
+ * at the cheapest one that reaches the VMAF target. The ladder itself is
+ * unchanged — same renditions, same resolutions — so the price quoted at create
+ * still holds, with the 1.5x per-title multiplier applied.
+ *
+ * Three requests are refused at create:
+ *   - `auto_abr` mode (`parameter_unsupported`) — not available yet;
+ *   - an output with no video renditions, or one whose every video rendition is
+ *     pinned to an explicit bitrate (`parameter_incompatible`) — a pinned
+ *     rendition ignores CRF, so the search would change nothing while still
+ *     being billed;
+ *   - a source shorter than 120 seconds, refused at probe with
+ *     `per_title_source_too_short` once the input has been measured.
+ *
+ * What the search decided is reported back on OutputReport.content_aware.
  *
  * @generated from message transcodely.v1.ContentAwareConfig
  */
 declare class ContentAwareConfig extends Message<ContentAwareConfig> {
     /**
-     * Encoding mode (required). NOT YET SUPPORTED — any value here causes the
-     * request to be rejected at create.
+     * Encoding mode (required). `per_title` is accepted; `auto_abr` is rejected
+     * at create.
      *
      * @generated from field: transcodely.v1.ContentAwareMode mode = 1;
      */
     mode: ContentAwareMode;
     /**
-     * Override VMAF target (70-99). NOT YET SUPPORTED — content-aware encoding is
-     * rejected at create, so this value is never applied.
+     * Override VMAF target (80-97). Default: 93, regardless of quality tier.
+     *
+     * The range is the one the per-title search can actually work in, narrowed
+     * from 70-99 before the feature was ever accepted: below 80 the result is not
+     * a quality target anyone would ask for, and above 97 the search cannot
+     * distinguish the last point from the one below it. Asking for a number we
+     * would silently move is worse than refusing it.
+     *
+     * The value the analysis actually searched against is reported back on
+     * OutputReport.content_aware.vmaf_target, which is the one to read.
      *
      * @generated from field: optional double vmaf_target = 2;
      */
     vmafTarget?: number;
     /**
-     * Auto ABR constraints (only for auto_abr mode). NOT YET SUPPORTED — rejected
-     * at create.
+     * Auto ABR constraints (only for auto_abr mode). NOT YET ACCEPTED — an
+     * auto_abr request is rejected at create whatever these say.
      *
      * @generated from field: optional transcodely.v1.AutoABRConfig auto_abr = 3;
      */
@@ -5450,9 +6430,10 @@ declare class ContentAwareConfig extends Message<ContentAwareConfig> {
 /**
  * Content analysis results from extended probe.
  *
- * NOT YET POPULATED. Produced only when content-aware analysis is wired in the
- * worker; today no job carries it, because content_aware requests are rejected
- * at create (see ContentAwareConfig).
+ * NOT YET POPULATED, and not carried by any RPC. The worker measures these
+ * complexity scores but has nowhere to send them: the API stores the per-title
+ * SEARCH RESULT (see OutputReportContentAware) and not the source scores behind
+ * it. Retained for wire compatibility.
  *
  * @generated from message transcodely.v1.ContentAnalysis
  */
@@ -7651,6 +8632,11 @@ declare class HLSConfig extends Message<HLSConfig> {
      * Variables: {codec}, {resolution}, {bitrate}, {index}
      * Default: "{codec}_{resolution}"
      *
+     * The rendered value becomes a filename and is also carried through the
+     * packager's stream descriptors, so the accepted charset is deliberately
+     * narrow: letters, digits, `_`, `-`, `.` and the `{}` that delimit template
+     * variables. No path separators, no `..`, and none of `, : ; ' " \`.
+     *
      * @generated from field: optional string variant_pattern = 4;
      */
     variantPattern?: string;
@@ -7820,7 +8806,10 @@ declare class OutputSpec extends Message<OutputSpec> {
     drm?: DRMConfig;
     /**
      * Content-aware encoding configuration.
-     * Enables per-title encoding or automatic ABR ladder generation.
+     * Enables per-title encoding, which tunes this output's CRF to the source
+     * rather than to its quality tier. Requires at least one video rendition that
+     * is not pinned to an explicit bitrate, and a source of at least 120 seconds.
+     * `auto_abr` mode is not accepted yet.
      *
      * @generated from field: optional transcodely.v1.ContentAwareConfig content_aware = 13;
      */
@@ -8275,6 +9264,18 @@ declare class JobOutput extends Message<JobOutput> {
      * @generated from field: optional string signed_url = 26;
      */
     signedUrl?: string;
+    /**
+     * What the produced file actually is, measured from the file itself, plus
+     * the verdict of comparing those measurements against what this output
+     * asked for. See OutputReport.
+     *
+     * Absent until the output has been measured: outputs that never produced a
+     * file, and outputs produced before this field existed, carry no report.
+     * Absence means "not measured" — never "nothing wrong".
+     *
+     * @generated from field: optional transcodely.v1.OutputReport report = 27;
+     */
+    report?: OutputReport;
     constructor(data?: PartialMessage<JobOutput>);
     static readonly runtime: typeof proto3;
     static readonly typeName = "transcodely.v1.JobOutput";
@@ -8284,6 +9285,440 @@ declare class JobOutput extends Message<JobOutput> {
     static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): JobOutput;
     static equals(a: JobOutput | PlainMessage<JobOutput> | undefined, b: JobOutput | PlainMessage<JobOutput> | undefined): boolean;
 }
+/**
+ * OutputReport is what the produced file turned out to be: codec, profile,
+ * pixel format, color signaling, dimensions, frame rate, audio and duration,
+ * all read back from the encoded file after it was written — not copied from
+ * the request and not inherited from the input. The one field that is not a
+ * measurement is container, which states the delivery format (see below).
+ *
+ * Alongside the facts sits a verdict: whether the file matches what the job
+ * asked for, and the exact field-by-field differences where it does not. The
+ * facts are measured by the encoder host; the verdict is computed by the API,
+ * so the same request always produces the same verdict.
+ *
+ * For a single-file output the facts describe that file. For a multi-rendition
+ * output (an ABR ladder, HLS, DASH, adaptive) they describe the
+ * HIGHEST-RESOLUTION rendition — the same one width, height and
+ * average_bitrate_kbps already report, and the one the verdict is judged
+ * against. Per-rendition detail stays in variant_results.
+ *
+ * Every value here is a parsed, named fact. The report never carries encoder
+ * command lines, tool output, stack traces, log lines or storage paths, and
+ * values that do not look like the short identifiers media tools emit are
+ * dropped rather than passed through.
+ *
+ * The string-typed fields (container, codec, profile, level, pix_fmt, the
+ * color fields, hdr_format) are deliberately strings and not enums: their
+ * vocabularies belong to the media formats themselves, and a value we have not
+ * catalogued yet must be reportable the day it appears rather than wait for a
+ * new enum value to travel through every SDK. They are always lowercase, and
+ * the documented spellings below are the ones you will see in practice.
+ *
+ * @generated from message transcodely.v1.OutputReport
+ */
+declare class OutputReport extends Message<OutputReport> {
+    /**
+     * Delivery format of this output, lowercase: "mp4", "mov", "webm", "mkv",
+     * "hls", "dash" or "adaptive" — the same vocabulary as the request's
+     * OutputSpec.type, and what a container mismatch is stated in.
+     *
+     * It names what was DELIVERED, not what a demuxer called an intermediate
+     * file: for a streaming output the delivered thing is the manifest and its
+     * segments, while the measurements in the fields below were taken on the
+     * encoded rendition before it was packaged.
+     *
+     * That makes this the one field the verdict cannot really police — a report
+     * echoing the requested type always matches. The check that a file is in the
+     * container it was promised runs on the encoder host, before delivery, and
+     * fails the output outright rather than describing it. This field is here so
+     * the report is self-describing, not as that check's second opinion.
+     *
+     * @generated from field: string container = 1;
+     */
+    container: string;
+    /**
+     * The produced video stream. Absent when the file carries no video stream.
+     *
+     * @generated from field: optional transcodely.v1.OutputReportVideo video = 2;
+     */
+    video?: OutputReportVideo;
+    /**
+     * The produced audio streams, in the order the container carries them.
+     * Empty for an output encoded without audio.
+     *
+     * @generated from field: repeated transcodely.v1.OutputReportAudio audio = 3;
+     */
+    audio: OutputReportAudio[];
+    /**
+     * Measured playback duration of the produced file in seconds.
+     *
+     * This is read from the produced file. It is not the input's duration and
+     * not the requested length, which is exactly what makes it able to catch an
+     * encode that stopped early.
+     *
+     * @generated from field: optional double duration_seconds = 4;
+     */
+    durationSeconds?: number;
+    /**
+     * Whether the produced file matches what this output asked for, and where it
+     * does not. Always present on a report.
+     *
+     * @generated from field: transcodely.v1.OutputReportVerdict verdict = 5;
+     */
+    verdict?: OutputReportVerdict;
+    /**
+     * When the produced file was measured.
+     *
+     * @generated from field: google.protobuf.Timestamp checked_at = 6;
+     */
+    checkedAt?: Timestamp;
+    /**
+     * What the content-aware analysis decided for this output, when the output
+     * was encoded with per-title analysis.
+     *
+     * Present ONLY for an output whose encode ran that analysis. Absent on every
+     * ordinary output, which is the overwhelming majority of them, and absent on
+     * an output that requested content-aware encoding but whose analysis pass
+     * never reported (it fell back to the quality tier's own CRF).
+     *
+     * @generated from field: optional transcodely.v1.OutputReportContentAware content_aware = 7;
+     */
+    contentAware?: OutputReportContentAware;
+    constructor(data?: PartialMessage<OutputReport>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.OutputReport";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): OutputReport;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): OutputReport;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): OutputReport;
+    static equals(a: OutputReport | PlainMessage<OutputReport> | undefined, b: OutputReport | PlainMessage<OutputReport> | undefined): boolean;
+}
+/**
+ * What the content-aware analysis decided for one output: the quality it aimed
+ * at, the quality it reached on its samples, and the encoder setting it chose.
+ *
+ * These describe the SEARCH, not the finished file. The search runs on short
+ * samples taken from the source before the real encode starts, so
+ * vmaf_achieved is the score those samples got at the chosen setting — not a
+ * measurement of the delivered output, which is never scored. The facts about
+ * the delivered file are the other fields of OutputReport.
+ *
+ * The fields are strings and numbers for the same reason the rest of the report
+ * is: this records what an encoder did, and a value we have not catalogued must
+ * be reportable the day it appears.
+ *
+ * @generated from message transcodely.v1.OutputReportContentAware
+ */
+declare class OutputReportContentAware extends Message<OutputReportContentAware> {
+    /**
+     * Analysis mode that ran, lowercase: "per_title". Same vocabulary as the
+     * request's ContentAwareMode.
+     *
+     * @generated from field: string mode = 1;
+     */
+    mode: string;
+    /**
+     * VMAF score the search aimed at, 0-100.
+     *
+     * This is the target actually used, which is not always the one requested:
+     * a value outside the range the analysis can search is clamped into it, and
+     * what you read here is the clamped one.
+     *
+     * @generated from field: optional double vmaf_target = 2;
+     */
+    vmafTarget?: number;
+    /**
+     * VMAF score the chosen setting reached on the analysis samples, 0-100.
+     * Absent when the search ended without a scored result.
+     *
+     * @generated from field: optional double vmaf_achieved = 3;
+     */
+    vmafAchieved?: number;
+    /**
+     * Constant-rate-factor the search settled on, in the encoder's own scale
+     * (lower is higher quality). Absent when the search produced none and the
+     * encode fell back to the quality tier's default.
+     *
+     * For a multi-rendition output this is the highest-resolution rendition's
+     * value; the lower rungs derive from it by the ladder's fixed offsets.
+     *
+     * @generated from field: optional int32 crf_chosen = 4;
+     */
+    crfChosen?: number;
+    constructor(data?: PartialMessage<OutputReportContentAware>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.OutputReportContentAware";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): OutputReportContentAware;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): OutputReportContentAware;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): OutputReportContentAware;
+    static equals(a: OutputReportContentAware | PlainMessage<OutputReportContentAware> | undefined, b: OutputReportContentAware | PlainMessage<OutputReportContentAware> | undefined): boolean;
+}
+/**
+ * Measured properties of a produced video stream.
+ *
+ * @generated from message transcodely.v1.OutputReportVideo
+ */
+declare class OutputReportVideo extends Message<OutputReportVideo> {
+    /**
+     * Codec the stream is encoded with, lowercase, e.g. "h264", "hevc", "vp9",
+     * "av1". Note "hevc" — that is the decoder name for the codec this API calls
+     * "h265" on a request.
+     *
+     * @generated from field: string codec = 1;
+     */
+    codec: string;
+    /**
+     * Encoded profile, lowercase and without spaces, e.g. "high", "main",
+     * "main10", "baseline", "profile0". Absent when the codec has no profile
+     * concept or the encoder reported none.
+     *
+     * @generated from field: optional string profile = 2;
+     */
+    profile?: string;
+    /**
+     * Encoded level as the codec expresses it, e.g. "4.0", "5.1". Absent when
+     * not reported.
+     *
+     * @generated from field: optional string level = 3;
+     */
+    level?: string;
+    /**
+     * Pixel format, lowercase, e.g. "yuv420p" (8-bit) or "yuv420p10le"
+     * (10-bit). This is how bit depth is read back: a 10-bit output that came
+     * out 8-bit says so here.
+     *
+     * @generated from field: optional string pix_fmt = 4;
+     */
+    pixFmt?: string;
+    /**
+     * Encoded frame dimensions in pixels, as stored.
+     *
+     * @generated from field: int32 width = 5;
+     */
+    width: number;
+    /**
+     * @generated from field: int32 height = 6;
+     */
+    height: number;
+    /**
+     * Measured average frame rate in frames per second, e.g. 29.97, 30, 59.94.
+     *
+     * @generated from field: optional double frame_rate = 7;
+     */
+    frameRate?: number;
+    /**
+     * Measured video bitrate in kbps. Absent when the container does not carry a
+     * per-stream bitrate.
+     *
+     * @generated from field: optional int32 bitrate_kbps = 8;
+     */
+    bitrateKbps?: number;
+    /**
+     * Color signaling carried by the stream.
+     *
+     * @generated from field: optional transcodely.v1.OutputReportColor color = 9;
+     */
+    color?: OutputReportColor;
+    /**
+     * HDR format the stream signals. Today this resolves to exactly one of
+     * "none", "hdr10" or "hlg" — nothing else is ever emitted.
+     *
+     * It is derived from the color signaling above, so it is a reading of the
+     * file and not an echo of the request: an SDR source that arrived wearing HDR
+     * tags, and whose tags we rewrote, reports "none". Wide-gamut primaries with
+     * a PQ transfer read as "hdr10"; with an HLG transfer, as "hlg".
+     *
+     * "hdr10_plus" and "dolby_vision" are RESERVED spellings — documented so
+     * consumers can switch on them ahead of time, and NOT EMITTED. Telling HDR10+
+     * from static HDR10, or finding a Dolby Vision RPU, needs the per-frame side
+     * data this report does not carry. Until that lands, an HDR10+ or Dolby
+     * Vision output reads as "hdr10" here, which is the static layer it also
+     * genuinely signals. Do not read "hdr10" as proof the dynamic layer is
+     * absent.
+     *
+     * @generated from field: string hdr_format = 10;
+     */
+    hdrFormat: string;
+    constructor(data?: PartialMessage<OutputReportVideo>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.OutputReportVideo";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): OutputReportVideo;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): OutputReportVideo;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): OutputReportVideo;
+    static equals(a: OutputReportVideo | PlainMessage<OutputReportVideo> | undefined, b: OutputReportVideo | PlainMessage<OutputReportVideo> | undefined): boolean;
+}
+/**
+ * Color signaling read from a produced video stream. Each value is the
+ * lowercase name the format assigns it; absent means the stream carries no
+ * value for it.
+ *
+ * @generated from message transcodely.v1.OutputReportColor
+ */
+declare class OutputReportColor extends Message<OutputReportColor> {
+    /**
+     * Color primaries, e.g. "bt709" (SDR), "bt2020" (wide gamut).
+     *
+     * @generated from field: optional string primaries = 1;
+     */
+    primaries?: string;
+    /**
+     * Transfer characteristics, e.g. "bt709" (SDR), "smpte2084" (PQ / HDR10),
+     * "arib-std-b67" (HLG).
+     *
+     * @generated from field: optional string transfer = 2;
+     */
+    transfer?: string;
+    /**
+     * Matrix coefficients, e.g. "bt709", "bt2020nc".
+     *
+     * @generated from field: optional string matrix = 3;
+     */
+    matrix?: string;
+    /**
+     * Signal range: "tv" (limited) or "pc" (full).
+     *
+     * @generated from field: optional string range = 4;
+     */
+    range?: string;
+    constructor(data?: PartialMessage<OutputReportColor>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.OutputReportColor";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): OutputReportColor;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): OutputReportColor;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): OutputReportColor;
+    static equals(a: OutputReportColor | PlainMessage<OutputReportColor> | undefined, b: OutputReportColor | PlainMessage<OutputReportColor> | undefined): boolean;
+}
+/**
+ * Measured properties of a produced audio stream.
+ *
+ * @generated from message transcodely.v1.OutputReportAudio
+ */
+declare class OutputReportAudio extends Message<OutputReportAudio> {
+    /**
+     * Codec the stream is encoded with, lowercase, e.g. "aac", "opus", "mp3",
+     * "flac".
+     *
+     * @generated from field: string codec = 1;
+     */
+    codec: string;
+    /**
+     * Channel count: 1 for mono, 2 for stereo, 6 for 5.1.
+     *
+     * @generated from field: optional int32 channels = 2;
+     */
+    channels?: number;
+    /**
+     * Sampling rate in hertz, e.g. 48000.
+     *
+     * @generated from field: optional int32 sample_rate_hz = 3;
+     */
+    sampleRateHz?: number;
+    /**
+     * Measured audio bitrate in kbps. Absent when the container does not carry
+     * a per-stream bitrate.
+     *
+     * @generated from field: optional int32 bitrate_kbps = 4;
+     */
+    bitrateKbps?: number;
+    /**
+     * Language tag carried by the stream, e.g. "eng", "spa". Absent when the
+     * stream is untagged.
+     *
+     * @generated from field: optional string language = 5;
+     */
+    language?: string;
+    constructor(data?: PartialMessage<OutputReportAudio>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.OutputReportAudio";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): OutputReportAudio;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): OutputReportAudio;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): OutputReportAudio;
+    static equals(a: OutputReportAudio | PlainMessage<OutputReportAudio> | undefined, b: OutputReportAudio | PlainMessage<OutputReportAudio> | undefined): boolean;
+}
+/**
+ * The result of comparing a produced file against what the job asked for.
+ *
+ * @generated from message transcodely.v1.OutputReportVerdict
+ */
+declare class OutputReportVerdict extends Message<OutputReportVerdict> {
+    /**
+     * True when every property we can check matched the request.
+     *
+     * Properties the request left open — "keep the original frame rate", a
+     * container that does not pin its audio codec — are not checked and cannot
+     * make this false.
+     *
+     * @generated from field: bool matches_request = 1;
+     */
+    matchesRequest: boolean;
+    /**
+     * Every property that did not match, one entry each. Empty when
+     * matches_request is true; a mismatch list is never empty when it is false.
+     *
+     * @generated from field: repeated transcodely.v1.OutputReportMismatch mismatches = 2;
+     */
+    mismatches: OutputReportMismatch[];
+    constructor(data?: PartialMessage<OutputReportVerdict>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.OutputReportVerdict";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): OutputReportVerdict;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): OutputReportVerdict;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): OutputReportVerdict;
+    static equals(a: OutputReportVerdict | PlainMessage<OutputReportVerdict> | undefined, b: OutputReportVerdict | PlainMessage<OutputReportVerdict> | undefined): boolean;
+}
+/**
+ * One property of the produced file that does not match what was requested.
+ *
+ * @generated from message transcodely.v1.OutputReportMismatch
+ */
+declare class OutputReportMismatch extends Message<OutputReportMismatch> {
+    /**
+     * Which property differs, from a fixed vocabulary: "container",
+     * "video.present", "video.codec", "video.profile", "video.pix_fmt",
+     * "video.resolution", "video.width", "video.height", "video.frame_rate",
+     * "video.color.transfer", "video.color.primaries", "audio.present",
+     * "duration_seconds".
+     *
+     * "video.resolution" carries resolution tier names ("1080p") and appears
+     * when the request named a tier; "video.width" / "video.height" carry pixel
+     * counts and appear when the request named exact dimensions.
+     *
+     * Branch on this, not on the values beside it.
+     *
+     * @generated from field: string field = 1;
+     */
+    field: string;
+    /**
+     * What the request asked for, as a short value, e.g. "h264", "1920",
+     * "high", "present". Where the request allows several answers — a
+     * multi-codec ABR ladder, for instance — this is the alternatives joined
+     * with "|", e.g. "h264|hevc".
+     *
+     * @generated from field: string expected = 2;
+     */
+    expected: string;
+    /**
+     * What the produced file carries instead, in the same vocabulary as
+     * expected, e.g. "hevc", "1280", "main", "absent".
+     *
+     * @generated from field: string actual = 3;
+     */
+    actual: string;
+    constructor(data?: PartialMessage<OutputReportMismatch>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.OutputReportMismatch";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): OutputReportMismatch;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): OutputReportMismatch;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): OutputReportMismatch;
+    static equals(a: OutputReportMismatch | PlainMessage<OutputReportMismatch> | undefined, b: OutputReportMismatch | PlainMessage<OutputReportMismatch> | undefined): boolean;
+}
 /**
  * Measured encode results for one variant of a multi-variant output.
  * Reported by the worker after encoding; index matches the variant's
@@ -9265,8 +10700,16 @@ declare class CreateJobRequest extends Message<CreateJobRequest> {
      */
     outputPathTemplate?: string;
     /**
-     * Write outputs to managed hosting storage and create a video record.
-     * When true, output_origin_id is not required.
+     * Write outputs to Transcodely-managed storage and create a hosted video
+     * record, playable over our CDN. When true, output_origin_id is not required.
+     *
+     * Managed hosting is enabled for the app the first time a job asks for it —
+     * there is no dashboard step and no AppService.EnableHosting call to make
+     * first. That first request provisions the app's storage bucket, its managed
+     * origin and its CDN pull zone, so it can take a few seconds longer than the
+     * ones after it. If provisioning fails the request is rejected with error
+     * code `hosting_provisioning_failed` (gRPC `unavailable`) and no job is
+     * created; the request is safe to retry unchanged.
      *
      * @generated from field: optional bool managed = 20;
      */
@@ -9846,6 +11289,18 @@ declare class Video extends Message<Video> {
      */
     outputSizeBytes: bigint;
     /**
+     * Total billed by the transcode job that produced this video, in EUR.
+     *
+     * Despite the name this is the job's WHOLE total, not encoding alone: a
+     * job's total already includes every fee billed on it, so for a video
+     * captioned inline (the auto_captions upload flag) the captions fee is part
+     * of this number, as is the flat per-job processing fee. Absent until the
+     * job settles.
+     *
+     * Prefer total_cost. This field covers one job, so it misses the cost of
+     * later jobs run against the video, and adding captions_cost to it
+     * double-counts inline captions.
+     *
      * @generated from field: optional double encoding_cost = 31;
      */
     encodingCost?: number;
@@ -9857,11 +11312,35 @@ declare class Video extends Message<Video> {
      * confirmed only when a caption artifact is actually delivered, so voided
      * and still-estimated fees are never counted. This is a per-feature
      * breakdown of already-billed job totals, not an extra charge on top of
-     * them.
+     * them: it is contained in total_cost, never added to it.
      *
      * @generated from field: optional double captions_cost = 50;
      */
     captionsCost?: number;
+    /**
+     * Everything this video has cost, in EUR: the sum of the settled totals of
+     * every job billed for it — the transcode that produced it plus any later
+     * job that took it as input (retro captions, for example).
+     *
+     * This is the authoritative per-video figure and the one to display. It is
+     * built from the same job totals the billing ledger is written from, so it
+     * reconciles with the invoice; captions_cost is a breakdown inside it.
+     * Absent while no linked job has settled yet.
+     *
+     * @generated from field: optional double total_cost = 52;
+     */
+    totalCost?: number;
+    /**
+     * Why this video failed, in one sentence a customer can act on. Present only
+     * when status is "error"; absent for every other status.
+     *
+     * This is curated copy, never raw failure text — it will not contain
+     * encoder output, storage-provider responses, or internal identifiers. When
+     * the video has a linked job, that job's error_message says the same thing.
+     *
+     * @generated from field: optional string error_message = 51;
+     */
+    errorMessage?: string;
     /**
      * Timestamps.
      *
@@ -10062,12 +11541,25 @@ declare class VideoTextTrack extends Message<VideoTextTrack> {
 /**
  * Request to create a presigned upload URL for direct client upload.
  *
+ * Managed hosting is enabled for the app the first time a video is created —
+ * there is no dashboard step and no AppService.EnableHosting call to make
+ * first. That first request provisions the app's storage bucket, its managed
+ * origin and its CDN pull zone, so it can take a few seconds longer than the
+ * ones after it. If provisioning fails the request is rejected with error code
+ * `hosting_provisioning_failed` (gRPC `unavailable`) and no video is created;
+ * the request is safe to retry unchanged.
+ *
  * @generated from message transcodely.v1.CreateUploadRequest
  */
 declare class CreateUploadRequest extends Message<CreateUploadRequest> {
     /**
-     * App to create the video under. Required. The app must have managed hosting
-     * enabled (AppService.EnableHosting) or the call fails with FailedPrecondition.
+     * App to create the video under. API-key callers may omit it (their key's app
+     * is used) or pass their own app; a different app is rejected with
+     * PermissionDenied. Portal/JWT callers pass it to create in a specific app in
+     * their org; omitted selects the org's first active app.
+     *
+     * Managed hosting does not have to be enabled on it first — see the note on
+     * this message; the call enables it.
      *
      * @generated from field: string app_id = 8;
      */
@@ -10109,7 +11601,11 @@ declare class CreateUploadRequest extends Message<CreateUploadRequest> {
      */
     tags: string[];
     /**
-     * Visibility setting. Defaults to "unlisted" if not specified.
+     * Visibility setting: "public", "unlisted" or "private".
+     *
+     * When omitted (or sent as an empty string), the app's hosting
+     * default_visibility applies; if the app has no default_visibility set
+     * either, the video is created "unlisted".
      *
      * @generated from field: optional string visibility = 7;
      */
@@ -10233,12 +11729,25 @@ declare class CompleteUploadResponse extends Message<CompleteUploadResponse> {
 /**
  * Request to create a hosted video from a remote URL (one-call ingest).
  *
+ * Managed hosting is enabled for the app the first time a video is created —
+ * there is no dashboard step and no AppService.EnableHosting call to make
+ * first. That first request provisions the app's storage bucket, its managed
+ * origin and its CDN pull zone, so it can take a few seconds longer than the
+ * ones after it. If provisioning fails the request is rejected with error code
+ * `hosting_provisioning_failed` (gRPC `unavailable`) and no video is created;
+ * the request is safe to retry unchanged.
+ *
  * @generated from message transcodely.v1.CreateFromUrlRequest
  */
 declare class CreateFromUrlRequest extends Message<CreateFromUrlRequest> {
     /**
-     * App to create the video under. Required. The app must have managed hosting
-     * enabled (AppService.EnableHosting) or the call fails with FailedPrecondition.
+     * App to create the video under. API-key callers may omit it (their key's app
+     * is used) or pass their own app; a different app is rejected with
+     * PermissionDenied. Portal/JWT callers pass it to create in a specific app in
+     * their org; omitted selects the org's first active app.
+     *
+     * Managed hosting does not have to be enabled on it first — see the note on
+     * this message; the call enables it.
      *
      * @generated from field: string app_id = 1;
      */
@@ -10272,7 +11781,11 @@ declare class CreateFromUrlRequest extends Message<CreateFromUrlRequest> {
      */
     tags: string[];
     /**
-     * Visibility setting. Defaults to "unlisted" if not specified.
+     * Visibility setting: "public", "unlisted" or "private".
+     *
+     * When omitted (or sent as an empty string), the app's hosting
+     * default_visibility applies; if the app has no default_visibility set
+     * either, the video is created "unlisted".
      *
      * @generated from field: optional string visibility = 6;
      */
@@ -10396,12 +11909,25 @@ declare class CompletedPart extends Message<CompletedPart> {
 /**
  * Request to create a multipart upload for large files.
  *
+ * Managed hosting is enabled for the app the first time a video is created —
+ * there is no dashboard step and no AppService.EnableHosting call to make
+ * first. That first request provisions the app's storage bucket, its managed
+ * origin and its CDN pull zone, so it can take a few seconds longer than the
+ * ones after it. If provisioning fails the request is rejected with error code
+ * `hosting_provisioning_failed` (gRPC `unavailable`) and no video is created;
+ * the request is safe to retry unchanged.
+ *
  * @generated from message transcodely.v1.CreateMultipartUploadRequest
  */
 declare class CreateMultipartUploadRequest extends Message<CreateMultipartUploadRequest> {
     /**
-     * App to create the video under. Required. The app must have managed hosting
-     * enabled (AppService.EnableHosting) or the call fails with FailedPrecondition.
+     * App to create the video under. API-key callers may omit it (their key's app
+     * is used) or pass their own app; a different app is rejected with
+     * PermissionDenied. Portal/JWT callers pass it to create in a specific app in
+     * their org; omitted selects the org's first active app.
+     *
+     * Managed hosting does not have to be enabled on it first — see the note on
+     * this message; the call enables it.
      *
      * @generated from field: string app_id = 1;
      */
@@ -10457,7 +11983,11 @@ declare class CreateMultipartUploadRequest extends Message<CreateMultipartUpload
      */
     tags: string[];
     /**
-     * Visibility setting. Defaults to "unlisted" if not specified.
+     * Visibility setting: "public", "unlisted" or "private".
+     *
+     * When omitted (or sent as an empty string), the app's hosting
+     * default_visibility applies; if the app has no default_visibility set
+     * either, the video is created "unlisted".
      *
      * @generated from field: optional string visibility = 13;
      */
@@ -11618,106 +13148,1120 @@ declare class Events {
     } & CallOptions): Promise<WebhookDelivery[]>;
 }
 
+declare class Health {
+    private readonly transport;
+    constructor(transport: Transport);
+    check(opts?: CallOptions): Promise<HealthCheckResponse>;
+}
+
 /**
- * Health status.
+ * Which provider shape an inbound event arrived in. Detected from the payload;
+ * you never declare it.
  *
- * @generated from enum transcodely.v1.HealthStatus
+ * @generated from enum transcodely.v1.StorageEventSource
  */
-declare enum HealthStatus {
+declare enum StorageEventSource {
     /**
-     * @generated from enum value: HEALTH_STATUS_UNSPECIFIED = 0;
+     * @generated from enum value: STORAGE_EVENT_SOURCE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Amazon S3 event notification delivered through an SNS HTTPS subscription.
+     *
+     * @generated from enum value: STORAGE_EVENT_SOURCE_S3_SNS = 1;
+     */
+    S3_SNS = 1,
+    /**
+     * Google Cloud Storage notification delivered by a Pub/Sub push
+     * subscription.
+     *
+     * @generated from enum value: STORAGE_EVENT_SOURCE_GCS_PUBSUB = 2;
+     */
+    GCS_PUBSUB = 2,
+    /**
+     * Supabase Storage, delivered by a database webhook on storage.objects.
+     *
+     * @generated from enum value: STORAGE_EVENT_SOURCE_SUPABASE = 3;
+     */
+    SUPABASE = 3,
+    /**
+     * The generic shape: {"bucket", "key", "etag", "size", "content_type"}.
+     * Used by the Cloudflare R2 queue-consumer template and anything you write
+     * yourself.
+     *
+     * @generated from enum value: STORAGE_EVENT_SOURCE_GENERIC = 4;
+     */
+    GENERIC = 4
+}
+/**
+ * What happened to a storage event.
+ *
+ * @generated from enum transcodely.v1.StorageEventStatus
+ */
+declare enum StorageEventStatus {
+    /**
+     * @generated from enum value: STORAGE_EVENT_STATUS_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Accepted and stored; not processed yet.
+     *
+     * @generated from enum value: STORAGE_EVENT_STATUS_RECEIVED = 1;
+     */
+    RECEIVED = 1,
+    /**
+     * Matched the rule's filters; the job is being created.
+     *
+     * @generated from enum value: STORAGE_EVENT_STATUS_MATCHED = 2;
+     */
+    MATCHED = 2,
+    /**
+     * Deliberately not turned into a job. `reason` says why — the filters did
+     * not match, the object is in a different bucket than the rule's origin, the
+     * rule is disabled, or the same object was already ingested.
+     *
+     * @generated from enum value: STORAGE_EVENT_STATUS_SKIPPED = 3;
+     */
+    SKIPPED = 3,
+    /**
+     * A job was created. `job_id` names it.
+     *
+     * @generated from enum value: STORAGE_EVENT_STATUS_CREATED = 4;
+     */
+    CREATED = 4,
+    /**
+     * Job creation was refused and will not be retried. `reason` carries the API
+     * error code that refused it, e.g. `limit_exceeded` or `billing_past_due`.
+     *
+     * @generated from enum value: STORAGE_EVENT_STATUS_FAILED = 5;
+     */
+    FAILED = 5
+}
+/**
+ * IngestRule is one standing instruction on one origin.
+ *
+ * @generated from message transcodely.v1.IngestRule
+ */
+declare class IngestRule extends Message<IngestRule> {
+    /**
+     * Rule ID, e.g. "ing_a1b2c3d4e5f6".
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * App that owns the rule.
+     *
+     * @generated from field: string app_id = 2;
+     */
+    appId: string;
+    /**
+     * Origin the objects live in. Must have read permission.
+     *
+     * @generated from field: string origin_id = 3;
+     */
+    originId: string;
+    /**
+     * Human-readable name.
+     *
+     * @generated from field: string name = 4;
+     */
+    name: string;
+    /**
+     * Whether the endpoint accepts events. A disabled rule answers 202 and
+     * records the event as skipped, so a provider subscription does not start
+     * failing while the rule is paused.
+     *
+     * @generated from field: bool enabled = 5;
+     */
+    enabled: boolean;
+    /**
+     * Which objects this rule acts on. An empty filter set matches everything in
+     * the origin's bucket.
+     *
+     * @generated from field: transcodely.v1.IngestRuleFilters filters = 6;
+     */
+    filters?: IngestRuleFilters;
+    /**
+     * The job to create for a matching object.
+     *
+     * @generated from field: transcodely.v1.IngestRuleAction action = 7;
+     */
+    action?: IngestRuleAction;
+    /**
+     * Where the event sender posts. Computed; read-only.
+     *
+     * @generated from field: string endpoint_url = 8;
+     */
+    endpointUrl: string;
+    /**
+     * First 8 characters of the inbound secret, e.g. "ings_a1b". Enough to tell
+     * two secrets apart in a log; never enough to use one.
+     *
+     * @generated from field: string secret_prefix = 9;
+     */
+    secretPrefix: string;
+    /**
+     * Last 4 characters of the inbound secret.
+     *
+     * @generated from field: string secret_hint = 10;
+     */
+    secretHint: string;
+    /**
+     * When the secret was last rotated. Absent if it has never been rotated.
+     *
+     * @generated from field: optional google.protobuf.Timestamp secret_rotated_at = 11;
+     */
+    secretRotatedAt?: Timestamp;
+    /**
+     * Until when the PREVIOUS secret is still accepted after a rotation, so the
+     * sender can be updated without dropping an event. Absent when no rotation is
+     * in flight.
+     *
+     * @generated from field: optional google.protobuf.Timestamp previous_secret_expires_at = 12;
+     */
+    previousSecretExpiresAt?: Timestamp;
+    /**
+     * How many events this rule has accepted, all time.
+     *
+     * @generated from field: int64 events_received = 13;
+     */
+    eventsReceived: bigint;
+    /**
+     * How many jobs this rule has created, all time.
+     *
+     * @generated from field: int64 jobs_created = 14;
+     */
+    jobsCreated: bigint;
+    /**
+     * When the last event arrived.
+     *
+     * @generated from field: optional google.protobuf.Timestamp last_event_at = 15;
+     */
+    lastEventAt?: Timestamp;
+    /**
+     * When the rule was created.
+     *
+     * @generated from field: google.protobuf.Timestamp created_at = 16;
+     */
+    createdAt?: Timestamp;
+    /**
+     * When the rule was last updated.
+     *
+     * @generated from field: google.protobuf.Timestamp updated_at = 17;
+     */
+    updatedAt?: Timestamp;
+    constructor(data?: PartialMessage<IngestRule>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.IngestRule";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): IngestRule;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): IngestRule;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): IngestRule;
+    static equals(a: IngestRule | PlainMessage<IngestRule> | undefined, b: IngestRule | PlainMessage<IngestRule> | undefined): boolean;
+}
+/**
+ * IngestRuleFilters narrows which objects a rule acts on. All set filters must
+ * pass. An object that fails any of them is recorded as skipped, never as an
+ * error.
+ *
+ * @generated from message transcodely.v1.IngestRuleFilters
+ */
+declare class IngestRuleFilters extends Message<IngestRuleFilters> {
+    /**
+     * Object key prefix, e.g. "uploads/". Matched against the key as the
+     * provider reports it, after URL-decoding.
+     *
+     * @generated from field: string prefix = 1;
+     */
+    prefix: string;
+    /**
+     * Case-insensitive key suffixes, e.g. [".mp4", ".mov"]. The object matches
+     * if it ends with any one of them. Empty accepts every extension.
+     *
+     * @generated from field: repeated string suffixes = 2;
+     */
+    suffixes: string[];
+    /**
+     * Exact content types, e.g. ["video/mp4"]. The object matches if the event
+     * reports any one of them. Empty accepts every content type — including an
+     * event that reports none, which several providers do.
+     *
+     * @generated from field: repeated string content_types = 3;
+     */
+    contentTypes: string[];
+    /**
+     * Smallest object size to act on, in bytes. 0 means no lower bound. Useful
+     * for ignoring the zero-byte placeholder some clients write first.
+     *
+     * @generated from field: int64 min_bytes = 4;
+     */
+    minBytes: bigint;
+    /**
+     * Largest object size to act on, in bytes. 0 means no upper bound.
+     *
+     * @generated from field: int64 max_bytes = 5;
+     */
+    maxBytes: bigint;
+    constructor(data?: PartialMessage<IngestRuleFilters>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.IngestRuleFilters";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): IngestRuleFilters;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): IngestRuleFilters;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): IngestRuleFilters;
+    static equals(a: IngestRuleFilters | PlainMessage<IngestRuleFilters> | undefined, b: IngestRuleFilters | PlainMessage<IngestRuleFilters> | undefined): boolean;
+}
+/**
+ * IngestRuleAction is the job a rule creates. It is the subset of
+ * CreateJobRequest that can be decided ahead of time; the input is supplied by
+ * the event (the rule's origin, and the key the event names).
+ *
+ * @generated from message transcodely.v1.IngestRuleAction
+ */
+declare class IngestRuleAction extends Message<IngestRuleAction> {
+    /**
+     * Output specifications, exactly as CreateJobRequest.outputs. Presets may be
+     * referenced by ID or slug.
+     *
+     * A rule always has at least one, enforced on the requests that can leave it
+     * without one (`create_ingest_rule.outputs_required` and
+     * `update_ingest_rule.clear_action_is_complete`) rather than on this field —
+     * an Update that changes only the priority sends no outputs at all, and a
+     * min_items here would refuse it.
+     *
+     * @generated from field: repeated transcodely.v1.OutputSpec outputs = 1;
+     */
+    outputs: OutputSpec[];
+    /**
+     * Write outputs to Transcodely-managed storage and create a hosted video,
+     * playable over our CDN. Set this or output_origin_id, not both.
+     *
+     * @generated from field: bool managed = 2;
+     */
+    managed: boolean;
+    /**
+     * Origin to write outputs to. Must have write permission. Set this or
+     * managed, not both.
+     *
+     * @generated from field: optional string output_origin_id = 3;
+     */
+    outputOriginId?: string;
+    /**
+     * Job-level output path template, as CreateJobRequest.output_path_template.
+     * In addition to the job variables it accepts {input_key}, {input_name} (the
+     * key's last segment without its extension) and {input_dir} (everything
+     * before the last segment), so outputs can mirror the source layout.
+     *
+     * @generated from field: optional string output_path_template = 4;
+     */
+    outputPathTemplate?: string;
+    /**
+     * Thumbnail specifications, as CreateJobRequest.thumbnails.
+     *
+     * @generated from field: repeated transcodely.v1.ThumbnailSpec thumbnails = 5;
+     */
+    thumbnails: ThumbnailSpec[];
+    /**
+     * Job priority.
+     *
+     * @generated from field: transcodely.v1.JobPriority priority = 6;
+     */
+    priority: JobPriority;
+    /**
+     * Metadata copied onto every job the rule creates. The rule also adds
+     * `ingest_rule_id` and `ingest_object_key` of its own, which you can read
+     * back on the job and in webhook payloads.
+     *
+     * @generated from field: map<string, string> metadata = 7;
+     */
+    metadata: {
+        [key: string]: string;
+    };
+    constructor(data?: PartialMessage<IngestRuleAction>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.IngestRuleAction";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): IngestRuleAction;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): IngestRuleAction;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): IngestRuleAction;
+    static equals(a: IngestRuleAction | PlainMessage<IngestRuleAction> | undefined, b: IngestRuleAction | PlainMessage<IngestRuleAction> | undefined): boolean;
+}
+/**
+ * StorageEvent is one delivery from a storage provider, and what came of it.
+ *
+ * @generated from message transcodely.v1.StorageEvent
+ */
+declare class StorageEvent extends Message<StorageEvent> {
+    /**
+     * Event ID, e.g. "sev_a1b2c3d4e5f6g7".
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * Rule that received it.
+     *
+     * @generated from field: string rule_id = 2;
+     */
+    ruleId: string;
+    /**
+     * App that owns the rule.
+     *
+     * @generated from field: string app_id = 3;
+     */
+    appId: string;
+    /**
+     * Bucket the object is in, as the provider reported it.
+     *
+     * @generated from field: string bucket = 4;
+     */
+    bucket: string;
+    /**
+     * Object key, URL-decoded. S3 percent-encodes keys and writes a space as
+     * "+"; what is stored here is the real key.
+     *
+     * @generated from field: string object_key = 5;
+     */
+    objectKey: string;
+    /**
+     * Object version identity, used for deduplication: an S3/R2 eTag, a GCS
+     * generation, or a Supabase metadata eTag. Empty when the provider sent
+     * none — the key alone then identifies the object.
+     *
+     * @generated from field: string etag = 6;
+     */
+    etag: string;
+    /**
+     * Object size in bytes, when the event reported one.
+     *
+     * @generated from field: int64 size_bytes = 7;
+     */
+    sizeBytes: bigint;
+    /**
+     * Content type, when the event reported one.
+     *
+     * @generated from field: string content_type = 8;
+     */
+    contentType: string;
+    /**
+     * Which provider shape the event arrived in.
+     *
+     * @generated from field: transcodely.v1.StorageEventSource source = 9;
+     */
+    source: StorageEventSource;
+    /**
+     * What happened to it.
+     *
+     * @generated from field: transcodely.v1.StorageEventStatus status = 10;
+     */
+    status: StorageEventStatus;
+    /**
+     * Why, for `skipped` and `failed`. A short machine-readable slug:
+     * "filter_prefix", "filter_suffix", "filter_content_type", "filter_size",
+     * "bucket_mismatch", "rule_disabled", "duplicate", or the API error code
+     * that refused the job.
+     *
+     * @generated from field: string reason = 11;
+     */
+    reason: string;
+    /**
+     * The job created from this event, if one was.
+     *
+     * @generated from field: string job_id = 12;
+     */
+    jobId: string;
+    /**
+     * When the event was accepted.
+     *
+     * @generated from field: google.protobuf.Timestamp received_at = 13;
+     */
+    receivedAt?: Timestamp;
+    /**
+     * When the event reached a terminal status.
+     *
+     * @generated from field: optional google.protobuf.Timestamp processed_at = 14;
+     */
+    processedAt?: Timestamp;
+    constructor(data?: PartialMessage<StorageEvent>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.StorageEvent";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): StorageEvent;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): StorageEvent;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): StorageEvent;
+    static equals(a: StorageEvent | PlainMessage<StorageEvent> | undefined, b: StorageEvent | PlainMessage<StorageEvent> | undefined): boolean;
+}
+/**
+ * Request to create an ingest rule.
+ *
+ * @generated from message transcodely.v1.CreateIngestRuleRequest
+ */
+declare class CreateIngestRuleRequest extends Message<CreateIngestRuleRequest> {
+    /**
+     * Origin the objects land in. Must be active and have read permission.
+     *
+     * @generated from field: string origin_id = 1;
+     */
+    originId: string;
+    /**
+     * Human-readable name.
+     *
+     * @generated from field: string name = 2;
+     */
+    name: string;
+    /**
+     * Which objects to act on. Omit to act on everything in the bucket.
+     *
+     * @generated from field: transcodely.v1.IngestRuleFilters filters = 3;
+     */
+    filters?: IngestRuleFilters;
+    /**
+     * The job to create for a matching object.
+     *
+     * @generated from field: transcodely.v1.IngestRuleAction action = 4;
+     */
+    action?: IngestRuleAction;
+    /**
+     * Whether the rule starts enabled. Defaults to true; send false to create it
+     * paused and turn it on once the sender is configured.
+     *
+     * @generated from field: optional bool enabled = 5;
+     */
+    enabled?: boolean;
+    /**
+     * Optional target app. API-key callers may omit it (their key's app is used)
+     * or pass their own app; a different app is rejected with PermissionDenied.
+     * Portal/JWT callers pass it to create in a specific app in their org;
+     * omitted selects the org's first active app.
+     *
+     * @generated from field: optional string app_id = 6;
+     */
+    appId?: string;
+    constructor(data?: PartialMessage<CreateIngestRuleRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.CreateIngestRuleRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): CreateIngestRuleRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): CreateIngestRuleRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): CreateIngestRuleRequest;
+    static equals(a: CreateIngestRuleRequest | PlainMessage<CreateIngestRuleRequest> | undefined, b: CreateIngestRuleRequest | PlainMessage<CreateIngestRuleRequest> | undefined): boolean;
+}
+/**
+ * Response from creating an ingest rule.
+ *
+ * @generated from message transcodely.v1.CreateIngestRuleResponse
+ */
+declare class CreateIngestRuleResponse extends Message<CreateIngestRuleResponse> {
+    /**
+     * The created rule.
+     *
+     * @generated from field: transcodely.v1.IngestRule rule = 1;
+     */
+    rule?: IngestRule;
+    /**
+     * The inbound secret, in full. Returned ONCE, here. We keep only enough of
+     * it to verify a delivery and to show you its first and last characters, so
+     * this value cannot be recovered later — rotate the rule to get a new one.
+     *
+     * @generated from field: string secret = 2;
+     */
+    secret: string;
+    constructor(data?: PartialMessage<CreateIngestRuleResponse>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.CreateIngestRuleResponse";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): CreateIngestRuleResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): CreateIngestRuleResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): CreateIngestRuleResponse;
+    static equals(a: CreateIngestRuleResponse | PlainMessage<CreateIngestRuleResponse> | undefined, b: CreateIngestRuleResponse | PlainMessage<CreateIngestRuleResponse> | undefined): boolean;
+}
+/**
+ * Request to get an ingest rule.
+ *
+ * @generated from message transcodely.v1.GetIngestRuleRequest
+ */
+declare class GetIngestRuleRequest extends Message<GetIngestRuleRequest> {
+    /**
+     * ID of the rule.
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    constructor(data?: PartialMessage<GetIngestRuleRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.GetIngestRuleRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): GetIngestRuleRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): GetIngestRuleRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): GetIngestRuleRequest;
+    static equals(a: GetIngestRuleRequest | PlainMessage<GetIngestRuleRequest> | undefined, b: GetIngestRuleRequest | PlainMessage<GetIngestRuleRequest> | undefined): boolean;
+}
+/**
+ * Response from getting an ingest rule.
+ *
+ * @generated from message transcodely.v1.GetIngestRuleResponse
+ */
+declare class GetIngestRuleResponse extends Message<GetIngestRuleResponse> {
+    /**
+     * The requested rule.
+     *
+     * @generated from field: transcodely.v1.IngestRule rule = 1;
+     */
+    rule?: IngestRule;
+    constructor(data?: PartialMessage<GetIngestRuleResponse>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.GetIngestRuleResponse";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): GetIngestRuleResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): GetIngestRuleResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): GetIngestRuleResponse;
+    static equals(a: GetIngestRuleResponse | PlainMessage<GetIngestRuleResponse> | undefined, b: GetIngestRuleResponse | PlainMessage<GetIngestRuleResponse> | undefined): boolean;
+}
+/**
+ * Request to list ingest rules.
+ *
+ * @generated from message transcodely.v1.ListIngestRulesRequest
+ */
+declare class ListIngestRulesRequest extends Message<ListIngestRulesRequest> {
+    /**
+     * Only rules on this origin.
+     *
+     * @generated from field: optional string origin_id = 1;
+     */
+    originId?: string;
+    /**
+     * Only enabled, or only disabled, rules.
+     *
+     * @generated from field: optional bool enabled = 2;
+     */
+    enabled?: boolean;
+    /**
+     * Pagination parameters.
+     *
+     * @generated from field: transcodely.v1.PaginationRequest pagination = 3;
+     */
+    pagination?: PaginationRequest;
+    /**
+     * Optional app filter. API-key callers may omit it (their key's app is used)
+     * or pass their own app; a different app is rejected with PermissionDenied.
+     * Portal/JWT callers pass it to list a specific app in their org; omitted
+     * returns rules across all apps in the org.
+     *
+     * @generated from field: optional string app_id = 4;
+     */
+    appId?: string;
+    constructor(data?: PartialMessage<ListIngestRulesRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.ListIngestRulesRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): ListIngestRulesRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): ListIngestRulesRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): ListIngestRulesRequest;
+    static equals(a: ListIngestRulesRequest | PlainMessage<ListIngestRulesRequest> | undefined, b: ListIngestRulesRequest | PlainMessage<ListIngestRulesRequest> | undefined): boolean;
+}
+/**
+ * Response from listing ingest rules.
+ *
+ * @generated from message transcodely.v1.ListIngestRulesResponse
+ */
+declare class ListIngestRulesResponse extends Message<ListIngestRulesResponse> {
+    /**
+     * The rules, newest first.
+     *
+     * @generated from field: repeated transcodely.v1.IngestRule rules = 1;
+     */
+    rules: IngestRule[];
+    /**
+     * Pagination metadata.
+     *
+     * @generated from field: transcodely.v1.PaginationResponse pagination = 2;
+     */
+    pagination?: PaginationResponse;
+    constructor(data?: PartialMessage<ListIngestRulesResponse>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.ListIngestRulesResponse";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): ListIngestRulesResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): ListIngestRulesResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): ListIngestRulesResponse;
+    static equals(a: ListIngestRulesResponse | PlainMessage<ListIngestRulesResponse> | undefined, b: ListIngestRulesResponse | PlainMessage<ListIngestRulesResponse> | undefined): boolean;
+}
+/**
+ * Request to update an ingest rule.
+ *
+ * Every field is optional and an update applies only what it carries: a field
+ * you do not send keeps the value it has, down to the individual filters and
+ * the individual parts of the action. This matters more here than on most
+ * objects, because a rule is a standing instruction to spend money — its
+ * filters are the only thing between "the objects I meant" and "everything that
+ * lands in the bucket", and a request that silently cleared them would be paid
+ * for one transcode at a time.
+ *
+ * Because the fields inside `filters` and `action` carry no presence of their
+ * own, "not sent" means "left at its default" — the same rule
+ * UpdateVideoRequest.tags states. Set `clear_filters` or `clear_action` when
+ * you mean to remove something rather than change it.
+ *
+ * @generated from message transcodely.v1.UpdateIngestRuleRequest
+ */
+declare class UpdateIngestRuleRequest extends Message<UpdateIngestRuleRequest> {
+    /**
+     * ID of the rule to update.
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * New name. Omit to leave unchanged.
+     *
+     * @generated from field: optional string name = 2;
+     */
+    name?: string;
+    /**
+     * Enable or disable the rule. Omit to leave unchanged. Turning a rule back on
+     * reports how many events it declined while it was off, in
+     * `events_skipped_while_disabled`.
+     *
+     * @generated from field: optional bool enabled = 3;
+     */
+    enabled?: boolean;
+    /**
+     * Filters to change. Each one you send replaces that filter; each one you
+     * leave out keeps the value it has. Narrowing a rule to a new prefix is
+     * therefore `{"filters": {"prefix": "raw/"}}` and nothing else — the suffix,
+     * content-type and size filters are untouched.
+     *
+     * A filter is removed rather than changed with `clear_filters`, which empties
+     * the set before this one is applied. So `clear_filters` alone widens the rule
+     * to everything in the bucket, and `clear_filters` together with a filter set
+     * replaces the set outright.
+     *
+     * @generated from field: transcodely.v1.IngestRuleFilters filters = 4;
+     */
+    filters?: IngestRuleFilters;
+    /**
+     * Parts of the action to change. Each field you send replaces that part of
+     * the action; each field you leave out keeps what it had. Repeated and map
+     * fields replace whole — sending one output replaces the output list, and
+     * sending one metadata pair replaces the metadata map — because neither
+     * carries the presence needed to merge a single entry.
+     *
+     * The destination is a pair, so it changes as a pair: send `managed` or
+     * `output_origin_id` to move the outputs, or neither to leave them where they
+     * are. Sending both is refused.
+     *
+     * `managed: false` is not a way to turn managed storage off — a false boolean
+     * is indistinguishable from an absent one, so it reads as "leave the
+     * destination alone" and changes nothing. Send `output_origin_id` instead.
+     *
+     * Emptying a repeated or map field is not expressible by sending it empty, so
+     * dropping the thumbnails or the metadata means `clear_action` with the action
+     * you want kept.
+     *
+     * @generated from field: transcodely.v1.IngestRuleAction action = 5;
+     */
+    action?: IngestRuleAction;
+    /**
+     * Issue a new secret. The previous one keeps working for 24 hours so the
+     * sender can be updated without dropping an event; the new secret is
+     * returned once, on this response.
+     *
+     * @generated from field: bool rotate_secret = 6;
+     */
+    rotateSecret: boolean;
+    /**
+     * Empty the filter set before applying `filters`. On its own it widens the
+     * rule to every object in the bucket; with `filters` it replaces the set
+     * outright instead of merging into it.
+     *
+     * @generated from field: bool clear_filters = 7;
+     */
+    clearFilters: boolean;
+    /**
+     * Replace the action outright instead of merging into it. `action` must then
+     * be complete — at least one output and exactly one destination — because
+     * nothing is carried over. This is how thumbnails or metadata are removed.
+     *
+     * @generated from field: bool clear_action = 8;
+     */
+    clearAction: boolean;
+    constructor(data?: PartialMessage<UpdateIngestRuleRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.UpdateIngestRuleRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): UpdateIngestRuleRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): UpdateIngestRuleRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): UpdateIngestRuleRequest;
+    static equals(a: UpdateIngestRuleRequest | PlainMessage<UpdateIngestRuleRequest> | undefined, b: UpdateIngestRuleRequest | PlainMessage<UpdateIngestRuleRequest> | undefined): boolean;
+}
+/**
+ * Response from updating an ingest rule.
+ *
+ * @generated from message transcodely.v1.UpdateIngestRuleResponse
+ */
+declare class UpdateIngestRuleResponse extends Message<UpdateIngestRuleResponse> {
+    /**
+     * The updated rule.
+     *
+     * @generated from field: transcodely.v1.IngestRule rule = 1;
+     */
+    rule?: IngestRule;
+    /**
+     * The new inbound secret, in full. Present only when rotate_secret was set,
+     * and returned only here.
+     *
+     * @generated from field: string secret = 2;
+     */
+    secret: string;
+    /**
+     * How many objects this rule declined while it was switched off, and can now
+     * be replayed with ReplayEvent.
+     *
+     * Returned when an update turns a paused rule back on, because pausing is
+     * advertised as safe and that is only half true: the deliveries were accepted
+     * and recorded, but nothing will retry them on its own. This is the number
+     * you would otherwise have to go and discover.
+     *
+     * @generated from field: int64 events_skipped_while_disabled = 3;
+     */
+    eventsSkippedWhileDisabled: bigint;
+    constructor(data?: PartialMessage<UpdateIngestRuleResponse>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.UpdateIngestRuleResponse";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): UpdateIngestRuleResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): UpdateIngestRuleResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): UpdateIngestRuleResponse;
+    static equals(a: UpdateIngestRuleResponse | PlainMessage<UpdateIngestRuleResponse> | undefined, b: UpdateIngestRuleResponse | PlainMessage<UpdateIngestRuleResponse> | undefined): boolean;
+}
+/**
+ * Request to delete an ingest rule.
+ *
+ * @generated from message transcodely.v1.DeleteIngestRuleRequest
+ */
+declare class DeleteIngestRuleRequest extends Message<DeleteIngestRuleRequest> {
+    /**
+     * ID of the rule to delete.
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    constructor(data?: PartialMessage<DeleteIngestRuleRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.DeleteIngestRuleRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): DeleteIngestRuleRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): DeleteIngestRuleRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): DeleteIngestRuleRequest;
+    static equals(a: DeleteIngestRuleRequest | PlainMessage<DeleteIngestRuleRequest> | undefined, b: DeleteIngestRuleRequest | PlainMessage<DeleteIngestRuleRequest> | undefined): boolean;
+}
+/**
+ * Response from deleting an ingest rule.
+ *
+ * @generated from message transcodely.v1.DeleteIngestRuleResponse
+ */
+declare class DeleteIngestRuleResponse extends Message<DeleteIngestRuleResponse> {
+    /**
+     * The rule as it was at deletion.
+     *
+     * @generated from field: transcodely.v1.IngestRule rule = 1;
+     */
+    rule?: IngestRule;
+    constructor(data?: PartialMessage<DeleteIngestRuleResponse>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.DeleteIngestRuleResponse";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): DeleteIngestRuleResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): DeleteIngestRuleResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): DeleteIngestRuleResponse;
+    static equals(a: DeleteIngestRuleResponse | PlainMessage<DeleteIngestRuleResponse> | undefined, b: DeleteIngestRuleResponse | PlainMessage<DeleteIngestRuleResponse> | undefined): boolean;
+}
+/**
+ * Request to list storage events.
+ *
+ * @generated from message transcodely.v1.ListIngestEventsRequest
+ */
+declare class ListIngestEventsRequest extends Message<ListIngestEventsRequest> {
+    /**
+     * Only events for this rule. Omit for every rule in scope.
+     *
+     * @generated from field: optional string rule_id = 1;
+     */
+    ruleId?: string;
+    /**
+     * Only events with this status.
+     *
+     * @generated from field: optional transcodely.v1.StorageEventStatus status = 2;
+     */
+    status?: StorageEventStatus;
+    /**
+     * Pagination parameters.
+     *
+     * @generated from field: transcodely.v1.PaginationRequest pagination = 3;
+     */
+    pagination?: PaginationRequest;
+    /**
+     * Optional app filter. API-key callers may omit it (their key's app is used)
+     * or pass their own app; a different app is rejected with PermissionDenied.
+     * Portal/JWT callers pass it to read a specific app in their org; omitted
+     * returns events across all apps in the org.
+     *
+     * @generated from field: optional string app_id = 4;
+     */
+    appId?: string;
+    constructor(data?: PartialMessage<ListIngestEventsRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.ListIngestEventsRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): ListIngestEventsRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): ListIngestEventsRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): ListIngestEventsRequest;
+    static equals(a: ListIngestEventsRequest | PlainMessage<ListIngestEventsRequest> | undefined, b: ListIngestEventsRequest | PlainMessage<ListIngestEventsRequest> | undefined): boolean;
+}
+/**
+ * Response from listing storage events.
+ *
+ * @generated from message transcodely.v1.ListIngestEventsResponse
+ */
+declare class ListIngestEventsResponse extends Message<ListIngestEventsResponse> {
+    /**
+     * The events, newest first.
+     *
+     * @generated from field: repeated transcodely.v1.StorageEvent events = 1;
+     */
+    events: StorageEvent[];
+    /**
+     * Pagination metadata.
+     *
+     * @generated from field: transcodely.v1.PaginationResponse pagination = 2;
+     */
+    pagination?: PaginationResponse;
+    constructor(data?: PartialMessage<ListIngestEventsResponse>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.ListIngestEventsResponse";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): ListIngestEventsResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): ListIngestEventsResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): ListIngestEventsResponse;
+    static equals(a: ListIngestEventsResponse | PlainMessage<ListIngestEventsResponse> | undefined, b: ListIngestEventsResponse | PlainMessage<ListIngestEventsResponse> | undefined): boolean;
+}
+/**
+ * Request to dry-run an object against a rule.
+ *
+ * @generated from message transcodely.v1.TestIngestRuleRequest
+ */
+declare class TestIngestRuleRequest extends Message<TestIngestRuleRequest> {
+    /**
+     * ID of the rule to test.
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * Object key to test, e.g. "uploads/clip.mp4".
+     *
+     * @generated from field: string object_key = 2;
+     */
+    objectKey: string;
+    /**
+     * Bucket the object would be in. Omit to use the rule's origin bucket, which
+     * is what a real event will almost always carry.
+     *
+     * @generated from field: string bucket = 3;
      */
-    UNSPECIFIED = 0,
+    bucket: string;
     /**
-     * Service is healthy and operational.
+     * Object size in bytes, for testing the size filters.
      *
-     * @generated from enum value: HEALTH_STATUS_HEALTHY = 1;
+     * @generated from field: int64 size_bytes = 4;
      */
-    HEALTHY = 1,
+    sizeBytes: bigint;
     /**
-     * Service is degraded but operational.
+     * Content type, for testing the content-type filter.
      *
-     * @generated from enum value: HEALTH_STATUS_DEGRADED = 2;
+     * @generated from field: string content_type = 5;
      */
-    DEGRADED = 2,
+    contentType: string;
     /**
-     * Service is unhealthy and not operational.
+     * Version identity the real event would carry — an S3/R2 eTag, a GCS
+     * generation, a Supabase metadata eTag.
      *
-     * @generated from enum value: HEALTH_STATUS_UNHEALTHY = 3;
+     * It changes no filter decision, and it is here for one reason: the
+     * idempotency key on the returned job request is derived from it, so a dry
+     * run that omits it predicts a key no real delivery will ever use. Supply it
+     * when you want the preview to name the key the job will actually carry.
+     *
+     * @generated from field: string etag = 6;
      */
-    UNHEALTHY = 3
+    etag: string;
+    constructor(data?: PartialMessage<TestIngestRuleRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.TestIngestRuleRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): TestIngestRuleRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): TestIngestRuleRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): TestIngestRuleRequest;
+    static equals(a: TestIngestRuleRequest | PlainMessage<TestIngestRuleRequest> | undefined, b: TestIngestRuleRequest | PlainMessage<TestIngestRuleRequest> | undefined): boolean;
 }
 /**
- * Response from health check.
+ * Request to replay a storage event.
  *
- * @generated from message transcodely.v1.HealthCheckResponse
+ * @generated from message transcodely.v1.ReplayIngestEventRequest
  */
-declare class HealthCheckResponse extends Message<HealthCheckResponse> {
-    /**
-     * Overall service status.
-     *
-     * @generated from field: transcodely.v1.HealthStatus status = 1;
-     */
-    status: HealthStatus;
+declare class ReplayIngestEventRequest extends Message<ReplayIngestEventRequest> {
     /**
-     * Service version.
+     * ID of the event to re-queue.
      *
-     * @generated from field: string version = 2;
+     * @generated from field: string event_id = 1;
      */
-    version: string;
+    eventId: string;
+    constructor(data?: PartialMessage<ReplayIngestEventRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.ReplayIngestEventRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): ReplayIngestEventRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): ReplayIngestEventRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): ReplayIngestEventRequest;
+    static equals(a: ReplayIngestEventRequest | PlainMessage<ReplayIngestEventRequest> | undefined, b: ReplayIngestEventRequest | PlainMessage<ReplayIngestEventRequest> | undefined): boolean;
+}
+/**
+ * Response from a replay.
+ *
+ * @generated from message transcodely.v1.ReplayIngestEventResponse
+ */
+declare class ReplayIngestEventResponse extends Message<ReplayIngestEventResponse> {
     /**
-     * Individual component statuses.
+     * The event, back in `received` and waiting to be processed.
      *
-     * @generated from field: repeated transcodely.v1.ComponentHealth components = 3;
+     * @generated from field: transcodely.v1.StorageEvent event = 1;
      */
-    components: ComponentHealth[];
-    constructor(data?: PartialMessage<HealthCheckResponse>);
+    event?: StorageEvent;
+    constructor(data?: PartialMessage<ReplayIngestEventResponse>);
     static readonly runtime: typeof proto3;
-    static readonly typeName = "transcodely.v1.HealthCheckResponse";
+    static readonly typeName = "transcodely.v1.ReplayIngestEventResponse";
     static readonly fields: FieldList;
-    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): HealthCheckResponse;
-    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): HealthCheckResponse;
-    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): HealthCheckResponse;
-    static equals(a: HealthCheckResponse | PlainMessage<HealthCheckResponse> | undefined, b: HealthCheckResponse | PlainMessage<HealthCheckResponse> | undefined): boolean;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): ReplayIngestEventResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): ReplayIngestEventResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): ReplayIngestEventResponse;
+    static equals(a: ReplayIngestEventResponse | PlainMessage<ReplayIngestEventResponse> | undefined, b: ReplayIngestEventResponse | PlainMessage<ReplayIngestEventResponse> | undefined): boolean;
 }
 /**
- * Health status of an individual component.
+ * Response from a dry run.
  *
- * @generated from message transcodely.v1.ComponentHealth
+ * @generated from message transcodely.v1.TestIngestRuleResponse
  */
-declare class ComponentHealth extends Message<ComponentHealth> {
+declare class TestIngestRuleResponse extends Message<TestIngestRuleResponse> {
     /**
-     * Component name (e.g., "database", "storage", "queue").
+     * Whether the object would produce a job.
      *
-     * @generated from field: string name = 1;
+     * @generated from field: bool matched = 1;
      */
-    name: string;
+    matched: boolean;
     /**
-     * Component status.
+     * Why not, when it would not. Same slugs as StorageEvent.reason.
      *
-     * @generated from field: transcodely.v1.HealthStatus status = 2;
+     * @generated from field: string reason = 2;
      */
-    status: HealthStatus;
+    reason: string;
     /**
-     * Optional message with additional details.
+     * The job request this rule would submit for the object. Present only when
+     * matched. Nothing was created — this is what WOULD be sent.
      *
-     * @generated from field: optional string message = 3;
+     * @generated from field: transcodely.v1.CreateJobRequest job_request = 3;
      */
-    message?: string;
-    constructor(data?: PartialMessage<ComponentHealth>);
+    jobRequest?: CreateJobRequest;
+    constructor(data?: PartialMessage<TestIngestRuleResponse>);
     static readonly runtime: typeof proto3;
-    static readonly typeName = "transcodely.v1.ComponentHealth";
+    static readonly typeName = "transcodely.v1.TestIngestRuleResponse";
     static readonly fields: FieldList;
-    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): ComponentHealth;
-    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): ComponentHealth;
-    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): ComponentHealth;
-    static equals(a: ComponentHealth | PlainMessage<ComponentHealth> | undefined, b: ComponentHealth | PlainMessage<ComponentHealth> | undefined): boolean;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): TestIngestRuleResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): TestIngestRuleResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): TestIngestRuleResponse;
+    static equals(a: TestIngestRuleResponse | PlainMessage<TestIngestRuleResponse> | undefined, b: TestIngestRuleResponse | PlainMessage<TestIngestRuleResponse> | undefined): boolean;
 }
 
-declare class Health {
+/**
+ * Ingest rules — standing instructions that turn an object landing in a watched
+ * bucket into a job, with no server of yours in the path.
+ *
+ * A rule hangs off one readable storage origin. Your provider posts its
+ * object-created events to the rule's `endpointUrl`, authenticated with the
+ * rule's secret; a delivery that passes the filters becomes a job. Duplicate
+ * deliveries are absorbed — an object is identified by (rule, bucket, key,
+ * etag) and produces exactly one job.
+ *
+ * The inbound endpoint itself is not part of this SDK: your storage provider
+ * calls it, not you.
+ */
+declare class IngestRules {
     private readonly transport;
     constructor(transport: Transport);
-    check(opts?: CallOptions): Promise<HealthCheckResponse>;
+    /**
+     * Creates a rule on a readable origin. The full response is returned because
+     * `secret` rides on it — the inbound secret is shown once, here, and cannot
+     * be read back. Store it wherever the event sender will read it from.
+     */
+    create(req: PartialMessage<CreateIngestRuleRequest>, opts?: CallOptions): Promise<CreateIngestRuleResponse>;
+    /**
+     * Fetches a rule by ID (`ing_*`). The secret is never returned again — the
+     * rule carries only `secretPrefix` and `secretHint`.
+     */
+    get(id: string, opts?: CallOptions): Promise<IngestRule>;
+    /** Rules in scope, newest first. Narrow with `originId` or `enabled`. */
+    list(req?: PartialMessage<ListIngestRulesRequest>, opts?: CallOptions): Page<IngestRule>;
+    /**
+     * Updates name, enabled state, filters or action, and optionally rotates the
+     * secret. It MERGES: an update applies only what it carries, down to the
+     * individual filters and the individual parts of the action. Narrowing a
+     * rule to a new prefix is `{ filters: { prefix: "raw/" } }` and nothing
+     * else — the suffix, content-type and size filters are untouched.
+     *
+     * Removing something rather than changing it takes the two clear flags.
+     * `clearFilters` empties the filter set before `filters` is applied, so on
+     * its own it widens the rule to everything in the bucket. `clearAction`
+     * replaces the action outright, and `action` must then be complete — at
+     * least one output and exactly one destination. That is the only way to drop
+     * an action's thumbnails or metadata, since a repeated or map field sent
+     * empty reads as "not sent".
+     *
+     * For the same reason `managed: false` does not turn managed storage off; it
+     * leaves the destination alone. Send `outputOriginId` instead.
+     *
+     * The full response is returned: a rotation puts the new secret on it (once),
+     * and switching a paused rule back on reports how many deliveries it declined
+     * while off in `eventsSkippedWhileDisabled`. After a rotation the previous
+     * secret keeps working for 24 hours.
+     */
+    update(req: PartialMessage<UpdateIngestRuleRequest>, opts?: CallOptions): Promise<UpdateIngestRuleResponse>;
+    /**
+     * Deletes a rule; its endpoint stops accepting events immediately. The events
+     * it already received are kept, and the rule as it stood is returned.
+     */
+    delete(id: string, opts?: CallOptions): Promise<IngestRule>;
+    /**
+     * Every delivery received and what came of it, newest first. Omit `ruleId`
+     * for all rules in scope; set `status` to read only the skipped or failed.
+     */
+    listEvents(req?: PartialMessage<ListIngestEventsRequest>, opts?: CallOptions): Page<StorageEvent>;
+    /**
+     * Dry-runs an object key against a rule: whether the filters match and, when
+     * they do, the exact job request the rule would submit. Nothing is stored and
+     * no job is created.
+     *
+     * Supply `etag` when you want the preview to name the idempotency key a real
+     * delivery would carry — the key is derived from it.
+     */
+    test(req: PartialMessage<TestIngestRuleRequest>, opts?: CallOptions): Promise<TestIngestRuleResponse>;
+    /**
+     * Re-queues a skipped or refused event (`sev_*`), giving the object one more
+     * pass through the rule.
+     *
+     * It exists because deduplication is permanent: re-sending the event, or
+     * re-uploading the same bytes, is absorbed and produces nothing. The event is
+     * reset rather than duplicated, so it keeps its id and its history.
+     */
+    replayEvent(eventId: string, opts?: CallOptions): Promise<StorageEvent>;
 }
 
 declare class Jobs {
@@ -12204,10 +14748,14 @@ declare class Organization extends Message<Organization> {
      */
     planName?: string;
     /**
-     * Whether this org must have a payment method on file. NOT ENFORCED: no
-     * create, dispatch or delivery path reads this today. It records intent
-     * ahead of the release that starts requiring one, at which point orgs
-     * already carrying false are the grandfathered population.
+     * Whether this org must have a payment method on file. ENFORCED: with no
+     * usable payment method a required org derives a restricting
+     * billing_standing, and its jobs resolve to the free tier's limits rather
+     * than to its plan.
+     *
+     * Organizations created before the enforcement release carry false and are
+     * the grandfathered population — unaffected until an operator turns it on.
+     * A comped org (billing_exempt) is off the hook whatever this says.
      *
      * @generated from field: bool payment_method_required = 11;
      */
@@ -12226,19 +14774,24 @@ declare class Organization extends Message<Organization> {
      * Derived payment health. Always BILLING_STANDING_ACTIVE when
      * payment_method_required is false, whatever the facts below say.
      *
+     * Filled on admin reads, and on OrganizationService.Get for a member of the
+     * org (JWT/portal actors). Absent on the API-key read path, which gets a
+     * refusal code on the create instead, and on List.
+     *
      * @generated from field: transcodely.v1.BillingStanding billing_standing = 13;
      */
     billingStanding: BillingStanding;
     /**
      * When the current grace window closes, present only while billing_standing
-     * is BILLING_STANDING_GRACE.
+     * is BILLING_STANDING_GRACE. Filled wherever billing_standing is.
      *
      * @generated from field: optional google.protobuf.Timestamp grace_until = 14;
      */
     graceUntil?: Timestamp;
     /**
      * Stable token explaining billing_standing; same vocabulary as
-     * BillingProfile.standing_reason.
+     * BillingProfile.standing_reason. ADMIN reads only — tokens like
+     * card_expired are payment-method detail, which a plain member never sees.
      *
      * @generated from field: string standing_reason = 15;
      */
@@ -12262,6 +14815,20 @@ declare class Organization extends Message<Organization> {
      * @generated from field: int32 consecutive_dunned_cycles = 17;
      */
     consecutiveDunnedCycles: number;
+    /**
+     * How automation may treat this organization — see BillingTreatment.
+     *
+     * ADMIN reads only, like standing_reason above: it is a statement about a
+     * commercial relationship, and a customer does not learn from an API field
+     * that we have decided never to interrupt them.
+     *
+     * Orthogonal to billing_standing. A trusted org can report
+     * BILLING_STANDING_DELINQUENT and still be untouched by every automated
+     * path — the founder gets an email instead.
+     *
+     * @generated from field: transcodely.v1.BillingTreatment billing_treatment = 18;
+     */
+    billingTreatment: BillingTreatment;
     constructor(data?: PartialMessage<Organization>);
     static readonly runtime: typeof proto3;
     static readonly typeName = "transcodely.v1.Organization";
@@ -13515,6 +16082,225 @@ declare class Presets {
     archive(id: string, opts?: CallOptions): Promise<Preset>;
 }
 
+/**
+ * Byte uploader for hosted videos.
+ *
+ * The API hands out presigned S3 URLs but never touches the bytes itself, so
+ * pushing a file at it is three steps: open an upload, PUT the bytes, tell the
+ * API the bytes landed. This module does all three, picking a single PUT for a
+ * file that fits in one part and an S3 multipart upload for anything larger.
+ *
+ * Everything here is plain `fetch` + Web Streams. `node:fs` is imported
+ * dynamically and only when the caller passes a filesystem path, so a bundler
+ * targeting the browser never pulls it in.
+ */
+
+/** Smallest part S3 accepts, except for the final part (5 MiB). */
+declare const MIN_PART_SIZE: number;
+/** Part size used when the caller doesn't pick one (25 MiB — the API default). */
+declare const DEFAULT_PART_SIZE: number;
+/** S3's hard ceiling on parts per multipart upload. */
+declare const MAX_PARTS = 10000;
+/** Platform upload ceiling enforced by the API (5 GB). */
+declare const MAX_UPLOAD_SIZE_BYTES = 5368709120;
+/** Parts uploaded at once when the caller doesn't pick a number. */
+declare const DEFAULT_CONCURRENCY = 4;
+/** Retries per part after the first attempt. */
+declare const DEFAULT_MAX_RETRIES = 4;
+/** First backoff step; doubles per retry, jittered, capped at 10 s. */
+declare const DEFAULT_RETRY_BASE_DELAY_MS = 500;
+/**
+ * Anything {@link Uploads.putFile} can read bytes from.
+ *
+ * - `string` — a filesystem path. Size and filename come from the path itself.
+ * - `Blob` / `File` — size comes from the blob; a `File` also supplies the name.
+ * - `ReadableStream<Uint8Array>` — you must pass `sizeBytes` and `filename`,
+ *   because the API needs both before the first byte moves.
+ */
+type UploadSource = string | Blob | ReadableStream<Uint8Array>;
+/** Progress snapshot, reported once per completed part. */
+interface UploadProgress {
+    uploadedBytes: number;
+    totalBytes: number;
+    partsCompleted: number;
+    totalParts: number;
+    /** 0–100, rounded. */
+    percent: number;
+}
+interface PutFileOptions {
+    /**
+     * App the video is created under. Optional for an API-key client: omit it
+     * and the key's own app is used. Pass it to be explicit, or when the client
+     * authenticates as a portal user, where omitting it selects the
+     * organization's first active app. An API key given a different app's ID is
+     * refused with `permission_denied`.
+     *
+     * The app does not have to have managed hosting turned on first: the create
+     * call provisions the bucket, the managed origin and the CDN pull zone on an
+     * app that has never hosted anything, which is why a first upload can take a
+     * few seconds longer than the ones after it. If that provisioning fails the
+     * request is refused with `hosting_provisioning_failed` and nothing is
+     * created, so the same call is safe to retry. A refusal on billing or
+     * admission grounds carries its own code instead (`billing_past_due`,
+     * `outstanding_balance_exceeded`, `limit_exceeded`, `intake_paused`, …).
+     */
+    appId?: string;
+    /** Required for a `Blob` or stream; inferred from the path or `File.name` otherwise. */
+    filename?: string;
+    /** Inferred from the extension (or `Blob.type`) when omitted. */
+    contentType?: string;
+    /** Required for a `ReadableStream`; ignored for a path or blob. */
+    sizeBytes?: number;
+    title?: string;
+    description?: string;
+    tags?: string[];
+    /** "public", "unlisted" or "private". Omit to take the app's default. */
+    visibility?: string;
+    /** Preset ID or slug driving the auto-transcode. */
+    preset?: string;
+    hoverPreviews?: boolean;
+    autoCaptions?: boolean;
+    /** Bytes per part. Clamped up to 5 MiB, and raised further if 10,000 parts would not cover the file. */
+    partSize?: number;
+    /** Parts in flight at once. Default 4. */
+    concurrency?: number;
+    /** Retries per part after the first attempt. Default 4. */
+    maxRetries?: number;
+    /** First backoff step in ms. Default 500. */
+    retryBaseDelayMs?: number;
+    /** Called after each part lands. Progress is per part, not per byte. */
+    onProgress?: (progress: UploadProgress) => void;
+    /** Abort the upload. In-flight parts are canceled and the multipart upload is aborted server-side. */
+    signal?: AbortSignal;
+}
+/**
+ * Part size for a file: the requested size (or the default), never below the
+ * 5 MiB S3 minimum, and raised as far as it takes to keep the part count
+ * inside S3's 10,000-part ceiling.
+ */
+declare function calculatePartSize(fileSize: number, requestedPartSize?: number): number;
+/** Number of parts a file of `fileSize` splits into at `partSize`. */
+declare function calculateTotalParts(fileSize: number, partSize: number): number;
+/** Best-effort MIME type from a filename extension. */
+declare function contentTypeForFilename(filename: string): string;
+/** The subset of VideoService the uploader drives. Lets tests stand in a double. */
+interface UploadRpcClient {
+    createUpload(req: {
+        appId?: string;
+        filename: string;
+        contentType: string;
+        sizeBytes: bigint;
+        title?: string;
+        description?: string;
+        tags?: string[];
+        visibility?: string;
+        preset?: string;
+        hoverPreviews?: boolean;
+        autoCaptions?: boolean;
+    }): Promise<{
+        video?: Video;
+        uploadUrl: string;
+    }>;
+    completeUpload(req: {
+        id: string;
+    }): Promise<{
+        video?: Video;
+    }>;
+    createMultipartUpload(req: {
+        appId?: string;
+        filename: string;
+        contentType: string;
+        sizeBytes: bigint;
+        totalParts: number;
+        partSizeBytes: bigint;
+        title?: string;
+        description?: string;
+        tags?: string[];
+        visibility?: string;
+        preset?: string;
+        hoverPreviews?: boolean;
+        autoCaptions?: boolean;
+    }): Promise<{
+        video?: Video;
+        uploadId: string;
+        parts: UploadPart[];
+    }>;
+    getUploadPartUrls(req: {
+        id: string;
+        uploadId: string;
+        partNumbers: number[];
+    }): Promise<{
+        parts: UploadPart[];
+    }>;
+    completeMultipartUpload(req: {
+        id: string;
+        uploadId: string;
+        parts: {
+            partNumber: number;
+            etag: string;
+        }[];
+    }): Promise<{
+        video?: Video;
+    }>;
+    abortMultipartUpload(req: {
+        id: string;
+        uploadId: string;
+    }): Promise<unknown>;
+}
+/**
+ * The upload state machine, decoupled from the transport so it can be driven
+ * by a double in tests. `client.uploads` is the wired-up subclass in
+ * `resources/uploads.ts`.
+ *
+ * The API's own transcode fires as soon as the upload is marked complete, so
+ * the returned `Video` is already in `processing` — watch it with
+ * `client.videos.watch(video.id)`.
+ */
+declare class UploadEngine {
+    private readonly rpc;
+    private readonly fetchImpl;
+    constructor(rpc: UploadRpcClient, fetchImpl: typeof fetch);
+    /**
+     * Upload a file and return the hosted video it created.
+     *
+     * A file that fits in one part goes up as a single PUT; anything larger uses
+     * an S3 multipart upload with `concurrency` parts in flight, per-part retry
+     * with jittered backoff, automatic re-signing when a presigned URL expires,
+     * and a server-side abort if the upload can't finish.
+     *
+     * @example
+     * ```ts
+     * const video = await client.uploads.putFile("./talk.mp4", {
+     *   appId: "app_k1l2m3n4o5",
+     *   title: "Conference talk",
+     *   onProgress: (p) => process.stdout.write(`\r${String(p.percent)}%`),
+     * });
+     * ```
+     */
+    putFile(source: UploadSource, opts: PutFileOptions): Promise<Video>;
+    private run;
+    private single;
+    private multipart;
+    /**
+     * One part, with retry/backoff. `invalidate` is what makes a 403 retryable:
+     * pass it on the multipart path, where the URL can be re-signed, and omit it
+     * for the single PUT, where there is nothing new to try.
+     */
+    private attempt;
+}
+
+/**
+ * `client.uploads` — the byte-pushing half of hosted video creation.
+ *
+ * The API only ever hands out presigned URLs; the bytes travel straight from
+ * the caller to object storage. This namespace wires {@link UploadEngine} to
+ * the SDK transport so `putFile` is one call.
+ */
+
+declare class Uploads extends UploadEngine {
+    constructor(transport: Transport);
+}
+
 /**
  * User account status.
  *
@@ -13549,9 +16335,10 @@ declare enum UserStatus {
     DELETED = 3
 }
 /**
- * User approval status. Until we have a payment gate, every new sign-up is
- * held in PENDING and must be approved by a staff member before they can use
- * the platform.
+ * Dashboard access review status. New sign-ups are approved automatically
+ * unless the platform is operating in manual-review mode, in which case they
+ * stay PENDING until a staff member approves them. Staff can reject a user at
+ * any time to revoke dashboard access.
  *
  * @generated from enum transcodely.v1.UserApprovalStatus
  */
@@ -13641,8 +16428,7 @@ declare class User extends Message<User> {
      */
     updatedAt?: Timestamp;
     /**
-     * Whether this user has been approved by a staff member.
-     * New sign-ups default to PENDING.
+     * Whether this user may use the dashboard.
      *
      * @generated from field: transcodely.v1.UserApprovalStatus approval_status = 11;
      */
@@ -13654,7 +16440,8 @@ declare class User extends Message<User> {
      */
     approvalDecidedAt?: Timestamp;
     /**
-     * The staff member's user_id who decided approval.
+     * The staff member's user_id who decided approval. Absent when the user was
+     * approved automatically rather than by a person.
      *
      * @generated from field: optional string approval_decided_by_user_id = 13;
      */
@@ -14075,8 +16862,10 @@ declare class Transcodely {
     private readonly transport;
     private _jobs;
     private _videos;
+    private _uploads;
     private _presets;
     private _origins;
+    private _ingestRules;
     private _apps;
     private _apiKeys;
     private _organizations;
@@ -14091,8 +16880,19 @@ declare class Transcodely {
     get lastRequestId(): string | undefined;
     get jobs(): Jobs;
     get videos(): Videos;
+    /**
+     * Byte uploads for hosted videos. `client.uploads.putFile(path, { appId })`
+     * runs the whole create → PUT → complete dance, picking a single PUT or an
+     * S3 multipart upload by file size.
+     */
+    get uploads(): Uploads;
     get presets(): Presets;
     get origins(): Origins;
+    /**
+     * Ingest rules: watch a bucket, transcode what lands in it. See
+     * {@link IngestRules}.
+     */
+    get ingestRules(): IngestRules;
     get apps(): Apps;
     get apiKeys(): ApiKeys;
     get organizations(): Organizations;
@@ -14115,8 +16915,29 @@ declare class Transcodely {
     get webhooks(): typeof Webhooks;
 }
 
+/**
+ * JSON serialization for the Transcodely wire format. Wraps protojson
+ * (`MessageType.toJson` / `fromJson`) with snake_case field names + lowercase
+ * simplified enum values, mirroring `internal/connect/codec.go` on the server.
+ */
+
+interface SerializeOptions {
+    /** Always emit unpopulated fields (matches server's EmitUnpopulated). */
+    emitDefaultValues?: boolean;
+}
+/**
+ * Render a generated message as a plain JSON value in the Transcodely wire
+ * format — snake_case field names, simplified lowercase enums, exactly what
+ * the REST/Connect API returns. Useful for logging and for tools that print
+ * API entities (the `transcodely` CLI's `--json` mode uses it).
+ *
+ * Unlike {@link serialize} it takes no MessageType: the message carries its
+ * own descriptor.
+ */
+declare function toWireJson<T extends Message<T>>(msg: T, opts?: SerializeOptions): JsonValue;
+
 /** SDK version. Bumped by release-please from package.json on each tag. */
-declare const SDK_VERSION = "0.3.6";
+declare const SDK_VERSION = "0.3.8";
 /**
  * API version this SDK release is pinned to. Sent on every request as
  * `Transcodely-Version`. Customers can override per-client via the
@@ -14126,4 +16947,121 @@ declare const API_VERSION = "2026-05-03";
 /** Default base URL for the production Transcodely API. */
 declare const DEFAULT_BASE_URL = "https://api.transcodely.com";
 
-export { APIConnectionError, APIError, Event as APIEvent, APIKey, API_VERSION, AV1Options, AbortMultipartUploadRequest, App, AppStatus, ArchiveAppRequest, ArchiveOriginRequest, ArchivePresetRequest, AudioCodec, AudioSettings, AudioStreamInfo, AudioTrackConfig, AuthenticationError, AutoABRConfig, AutoProfileDefaults, BYOKConfig, BillingPaymentMethod, BillingPortalSession, BillingProfile, BillingStanding, BitrateMode, BurnInStyle, type CallOptions, CancelJobRequest, CancelJobResponse, ChapterPoint, ChapterResult, CheckSlugRequest, CheckSlugResponse, ClipConfig, CompleteMultipartUploadRequest, CompleteMultipartUploadResponse, CompleteUploadRequest, CompleteUploadResponse, CompletedPart, ConfirmJobRequest, ConfirmJobResponse, ConflictError, Container, ContentAnalysis, ContentAwareConfig, ContentAwareMode, ContentType, CreateAPIKeyRequest, CreateAPIKeyResponse, CreateAppRequest, CreateAppResponse, CreateBillingPortalSessionRequest, CreateBillingPortalSessionResponse, CreateFromUrlRequest, CreateFromUrlResponse, CreateJobRequest, CreateJobResponse, CreateMultipartUploadRequest, CreateMultipartUploadResponse, CreateOrganizationRequest, CreateOrganizationResponse, CreateOriginRequest, CreateOriginResponse, CreatePresetRequest, CreatePresetResponse, CreateUploadRequest, CreateUploadResponse, CreateWebhookEndpointRequest, CreateWebhookEndpointResponse, DASHConfig, DEFAULT_BASE_URL, DEFAULT_TOLERANCE_SECONDS, DRMConfig, DRMSystem, DailyUsage, DeleteVideoRequest, DeleteWebhookEndpointRequest, DeleteWebhookEndpointResponse, DeliveryFormat, DuplicatePresetRequest, DuplicatePresetResponse, EVENT_ID_HEADER, EnableHostingRequest, EnableHostingResponse, EncryptionScheme, EndpointHealthSummary, ErrorDetails, type EventBase, ExecutionTiming, type FieldViolation, GOPAlignmentMode, GcsCredentials, GcsOriginConfig, GetAPIKeyRequest, GetAPIKeyResponse, GetAppRequest, GetAppResponse, GetBillingProfileRequest, GetBillingProfileResponse, GetEndpointHealthRequest, GetEndpointHealthResponse, GetInvoiceRequest, GetInvoiceResponse, GetJobRequest, GetJobResponse, GetMeRequest, GetMeResponse, GetMembershipRequest, GetMembershipResponse, GetOrganizationRequest, GetOrganizationResponse, GetOriginRequest, GetOriginResponse, GetPresetBySlugRequest, GetPresetBySlugResponse, GetPresetRequest, GetPresetResponse, GetSpendRequest, GetSpendResponse, GetStatsRequest, GetStatsResponse, GetUpcomingInvoiceRequest, GetUpcomingInvoiceResponse, GetUploadPartUrlsRequest, GetUploadPartUrlsResponse, GetUsageRequest, GetUsageResponse, GetUserRequest, GetUserResponse, GetVideoRequest, GetVideoResponse, H264Options, H265Options, HDRConfig, HDRFormat, HDRMode, HLSConfig, HLSPlaylistType, HLSSegmentFormat, HealthBucket, HostingConfig, HttpCredentials, HttpOriginConfig, InputMetadata, InvalidRequestError, Invoice, InvoiceLineItem, InvoiceLineType, InvoiceStatus, Job, JobCostBreakdown, JobCostLine, JobCostLineType, JobFee, JobOutput, JobPriority, JobStatus, KeyServerConfig, type KnownWebhookEvent, ListAPIKeysRequest, ListAPIKeysResponse, ListAppsRequest, ListAppsResponse, ListEventsRequest, ListEventsResponse, ListInvoicesRequest, ListInvoicesResponse, ListJobsRequest, ListJobsResponse, ListMembershipsRequest, ListMembershipsResponse, ListOrganizationsRequest, ListOrganizationsResponse, ListOriginsRequest, ListOriginsResponse, ListPresetsRequest, ListPresetsResponse, ListTopVideosRequest, ListTopVideosResponse, ListUsersRequest, ListUsersResponse, ListVideosRequest, ListVideosResponse, ListWebhookDeliveriesRequest, ListWebhookDeliveriesResponse, ListWebhookEndpointsRequest, ListWebhookEndpointsResponse, type LogEvent, Membership, MembershipRole, MembershipStatus, MembershipWithUser, NotFoundError, Organization, OrganizationStatus, Origin, OriginPermission, OriginProvider, OriginRef, OriginStatus, OutputFormat, OutputSpec, OutputStatus, OutputVariantResult, Page, PaginationRequest, PaginationResponse, PaymentMethodState, PermissionError, PreconditionError, Preset, PresetVariant, PricingSnapshot, QualityTier, R2Jurisdiction, R2OriginConfig, RateLimitError, RemoveMembershipRequest, ResendEventRequest, ResendEventResponse, Resolution, RetrieveEventRequest, RetrieveEventResponse, RetrieveWebhookEndpointRequest, RetrieveWebhookEndpointResponse, RevokeAPIKeyRequest, RotateWebhookSecretRequest, RotateWebhookSecretResponse, S3Credentials, S3OriginConfig, SDK_VERSION, SIGNATURE_HEADER, SegmentConfig, SendTestWebhookRequest, SendTestWebhookResponse, type SpendLimitNotification, StreamingConfig, SubtitleFormat, SubtitleOperation, SubtitleResult, SubtitleStreamInfo, SubtitleTrack, ThumbnailFormat, ThumbnailMode, ThumbnailResult, ThumbnailSpec, ToneMapping, TopVideo, Transcodely, type TranscodelyConfig, TranscodelyError, type UnknownWebhookEvent, UpdateAppRequest, UpdateAppResponse, UpdateHostingConfigRequest, UpdateHostingConfigResponse, UpdateMeRequest, UpdateMeResponse, UpdateMembershipRoleRequest, UpdateMembershipRoleResponse, UpdateOrganizationRequest, UpdateOrganizationResponse, UpdateOriginRequest, UpdateOriginResponse, UpdatePresetRequest, UpdatePresetResponse, UpdateSpendLimitRequest, UpdateSpendLimitResponse, UpdateVideoRequest, UpdateVideoResponse, UpdateWebhookEndpointRequest, UpdateWebhookEndpointResponse, UploadPart, UsageSummary, User, UserApprovalStatus, UserOrganization, UserStatus, UserWithOrganizations, VP9Options, ValidateOriginRequest, ValidateOriginResponse, ValidationResult, VariantPricingSnapshot, type VerifyOptions, Video, VideoCodec, VideoRendition, VideoSettings, VideoStatsDay, VideoStatsTotals, VideoStatus, VideoStreamInfo, VideoTextTrack, VideoVariant, VideoVisibility, WEBHOOK_EVENT_TYPES, WatchEventType, WatchJobRequest, WatchJobResponse, WatchVideoRequest, WatchVideoResponse, WatermarkAnchor, WatermarkConfig, WatermarkPixelPlacement, WebhookDelivery, WebhookEndpoint, WebhookError, type WebhookEvent, type WebhookEventType, WebhookPayloadError, WebhookSignatureError, WebhookTimestampError, Webhooks, constructEvent, isEventType, isKnownEvent, verifySignature };
+/**
+ * Health status.
+ *
+ * @generated from enum transcodely.v1.HealthStatus
+ */
+declare enum HealthStatus {
+    /**
+     * @generated from enum value: HEALTH_STATUS_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * Service is healthy and operational.
+     *
+     * @generated from enum value: HEALTH_STATUS_HEALTHY = 1;
+     */
+    HEALTHY = 1,
+    /**
+     * Service is degraded but operational.
+     *
+     * @generated from enum value: HEALTH_STATUS_DEGRADED = 2;
+     */
+    DEGRADED = 2,
+    /**
+     * Service is unhealthy and not operational.
+     *
+     * @generated from enum value: HEALTH_STATUS_UNHEALTHY = 3;
+     */
+    UNHEALTHY = 3
+}
+/**
+ * Request for health check.
+ *
+ * @generated from message transcodely.v1.HealthCheckRequest
+ */
+declare class HealthCheckRequest extends Message<HealthCheckRequest> {
+    /**
+     * Optional: specific service to check (empty = all).
+     *
+     * @generated from field: optional string service = 1;
+     */
+    service?: string;
+    constructor(data?: PartialMessage<HealthCheckRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.HealthCheckRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): HealthCheckRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): HealthCheckRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): HealthCheckRequest;
+    static equals(a: HealthCheckRequest | PlainMessage<HealthCheckRequest> | undefined, b: HealthCheckRequest | PlainMessage<HealthCheckRequest> | undefined): boolean;
+}
+/**
+ * Response from health check.
+ *
+ * @generated from message transcodely.v1.HealthCheckResponse
+ */
+declare class HealthCheckResponse extends Message<HealthCheckResponse> {
+    /**
+     * Overall service status.
+     *
+     * @generated from field: transcodely.v1.HealthStatus status = 1;
+     */
+    status: HealthStatus;
+    /**
+     * Service version.
+     *
+     * @generated from field: string version = 2;
+     */
+    version: string;
+    /**
+     * Individual component statuses.
+     *
+     * @generated from field: repeated transcodely.v1.ComponentHealth components = 3;
+     */
+    components: ComponentHealth[];
+    constructor(data?: PartialMessage<HealthCheckResponse>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.HealthCheckResponse";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): HealthCheckResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): HealthCheckResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): HealthCheckResponse;
+    static equals(a: HealthCheckResponse | PlainMessage<HealthCheckResponse> | undefined, b: HealthCheckResponse | PlainMessage<HealthCheckResponse> | undefined): boolean;
+}
+/**
+ * Health status of an individual component.
+ *
+ * @generated from message transcodely.v1.ComponentHealth
+ */
+declare class ComponentHealth extends Message<ComponentHealth> {
+    /**
+     * Component name (e.g., "database", "storage", "queue").
+     *
+     * @generated from field: string name = 1;
+     */
+    name: string;
+    /**
+     * Component status.
+     *
+     * @generated from field: transcodely.v1.HealthStatus status = 2;
+     */
+    status: HealthStatus;
+    /**
+     * Optional message with additional details.
+     *
+     * @generated from field: optional string message = 3;
+     */
+    message?: string;
+    constructor(data?: PartialMessage<ComponentHealth>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.ComponentHealth";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): ComponentHealth;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): ComponentHealth;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): ComponentHealth;
+    static equals(a: ComponentHealth | PlainMessage<ComponentHealth> | undefined, b: ComponentHealth | PlainMessage<ComponentHealth> | undefined): boolean;
+}
+
+export { APIConnectionError, APIError, Event as APIEvent, APIKey, API_VERSION, AV1Options, AbortMultipartUploadRequest, App, AppStatus, ArchiveAppRequest, ArchiveOriginRequest, ArchivePresetRequest, AudioCodec, AudioSettings, AudioStreamInfo, AudioTrackConfig, AuthenticationError, AutoABRConfig, AutoProfileDefaults, BYOKConfig, BillingPaymentMethod, BillingPortalSession, BillingProfile, BillingStanding, BillingTreatment, BitrateMode, Budget, BurnInStyle, type CallOptions, CancelJobRequest, CancelJobResponse, CaptionStyle, ChapterPoint, ChapterResult, CheckSlugRequest, CheckSlugResponse, ClipConfig, CompleteMultipartUploadRequest, CompleteMultipartUploadResponse, CompleteUploadRequest, CompleteUploadResponse, CompletedPart, ComponentHealth, ConfirmJobRequest, ConfirmJobResponse, ConflictError, Container, ContentAnalysis, ContentAwareConfig, ContentAwareMode, ContentType, CreateAPIKeyRequest, CreateAPIKeyResponse, CreateAppRequest, CreateAppResponse, CreateBillingPortalSessionRequest, CreateBillingPortalSessionResponse, CreateFromUrlRequest, CreateFromUrlResponse, CreateIngestRuleRequest, CreateIngestRuleResponse, CreateJobRequest, CreateJobResponse, CreateMultipartUploadRequest, CreateMultipartUploadResponse, CreateOrganizationRequest, CreateOrganizationResponse, CreateOriginRequest, CreateOriginResponse, CreatePresetRequest, CreatePresetResponse, CreateUploadRequest, CreateUploadResponse, CreateWebhookEndpointRequest, CreateWebhookEndpointResponse, DASHConfig, DEFAULT_BASE_URL, DEFAULT_CONCURRENCY, DEFAULT_MAX_RETRIES, DEFAULT_PART_SIZE, DEFAULT_RETRY_BASE_DELAY_MS, DEFAULT_TOLERANCE_SECONDS, DRMConfig, DRMSystem, DailyUsage, DeleteIngestRuleRequest, DeleteIngestRuleResponse, DeleteVideoRequest, DeleteWebhookEndpointRequest, DeleteWebhookEndpointResponse, DeliveryFormat, DunningStage, DuplicatePresetRequest, DuplicatePresetResponse, EVENT_ID_HEADER, EnableHostingRequest, EnableHostingResponse, EncryptionScheme, EndpointHealthSummary, ErrorDetails, type EventBase, ExecutionTiming, ExposureThresholdSource, type FieldViolation, GOPAlignmentMode, GcsCredentials, GcsOriginConfig, GetAPIKeyRequest, GetAPIKeyResponse, GetAppRequest, GetAppResponse, GetBillingProfileRequest, GetBillingProfileResponse, GetBudgetRequest, GetBudgetResponse, GetEndpointHealthRequest, GetEndpointHealthResponse, GetIngestRuleRequest, GetIngestRuleResponse, GetInvoiceRequest, GetInvoiceResponse, GetJobRequest, GetJobResponse, GetMeRequest, GetMeResponse, GetMembershipRequest, GetMembershipResponse, GetOrganizationRequest, GetOrganizationResponse, GetOriginRequest, GetOriginResponse, GetOutstandingBalanceRequest, GetOutstandingBalanceResponse, GetPresetBySlugRequest, GetPresetBySlugResponse, GetPresetRequest, GetPresetResponse, GetSpendRequest, GetSpendResponse, GetStatsRequest, GetStatsResponse, GetUpcomingInvoiceRequest, GetUpcomingInvoiceResponse, GetUploadPartUrlsRequest, GetUploadPartUrlsResponse, GetUsageRequest, GetUsageResponse, GetUserRequest, GetUserResponse, GetVideoRequest, GetVideoResponse, H264Options, H265Options, HDRConfig, HDRFormat, HDRMode, HLSConfig, HLSPlaylistType, HLSSegmentFormat, HealthBucket, HealthCheckRequest, HealthCheckResponse, HealthStatus, HostingConfig, HttpCredentials, HttpOriginConfig, IngestRule, IngestRuleAction, IngestRuleFilters, InputMetadata, InvalidRequestError, Invoice, InvoiceLineItem, InvoiceLineType, InvoiceStatus, Job, JobCostBreakdown, JobCostLine, JobCostLineType, JobFee, JobOutput, JobPriority, JobStatus, KeyServerConfig, type KnownWebhookEvent, ListAPIKeysRequest, ListAPIKeysResponse, ListAppsRequest, ListAppsResponse, ListEventsRequest, ListEventsResponse, ListIngestEventsRequest, ListIngestEventsResponse, ListIngestRulesRequest, ListIngestRulesResponse, ListInvoicesRequest, ListInvoicesResponse, ListJobsRequest, ListJobsResponse, ListMembershipsRequest, ListMembershipsResponse, ListOrganizationsRequest, ListOrganizationsResponse, ListOriginsRequest, ListOriginsResponse, ListPresetsRequest, ListPresetsResponse, ListTopVideosRequest, ListTopVideosResponse, ListUsersRequest, ListUsersResponse, ListVideosRequest, ListVideosResponse, ListWebhookDeliveriesRequest, ListWebhookDeliveriesResponse, ListWebhookEndpointsRequest, ListWebhookEndpointsResponse, type LogEvent, MAX_PARTS, MAX_UPLOAD_SIZE_BYTES, MIN_PART_SIZE, Membership, MembershipRole, MembershipStatus, MembershipWithUser, NotFoundError, Organization, OrganizationStatus, Origin, OriginPermission, OriginProvider, OriginRef, OriginStatus, OutputFormat, OutputReport, OutputReportAudio, OutputReportColor, OutputReportContentAware, OutputReportMismatch, OutputReportVerdict, OutputReportVideo, OutputSpec, OutputStatus, OutputVariantResult, OutstandingBalance, Page, PaginationRequest, PaginationResponse, PaymentMethodState, PermissionError, PlayerConfig, PreconditionError, Preset, PresetVariant, PricingSnapshot, type PutFileOptions, QualityTier, R2Jurisdiction, R2OriginConfig, RateLimitError, RemoveMembershipRequest, ReplayIngestEventRequest, ReplayIngestEventResponse, ResendEventRequest, ResendEventResponse, Resolution, RetrieveEventRequest, RetrieveEventResponse, RetrieveWebhookEndpointRequest, RetrieveWebhookEndpointResponse, RevokeAPIKeyRequest, RotateWebhookSecretRequest, RotateWebhookSecretResponse, S3Credentials, S3OriginConfig, SDK_VERSION, SIGNATURE_HEADER, SegmentConfig, SendTestWebhookRequest, SendTestWebhookResponse, SettleOutstandingBalanceRequest, SettleOutstandingBalanceResponse, Settlement, type SpendLimitNotification, StorageEvent, StorageEventSource, StorageEventStatus, StreamingConfig, SubtitleFormat, SubtitleOperation, SubtitleResult, SubtitleStreamInfo, SubtitleTrack, TestIngestRuleRequest, TestIngestRuleResponse, ThumbnailFormat, ThumbnailMode, ThumbnailResult, ThumbnailSpec, ToneMapping, TopVideo, Transcodely, type TranscodelyConfig, TranscodelyError, TrustTier, type UnknownWebhookEvent, UpdateAppRequest, UpdateAppResponse, UpdateBudgetRequest, UpdateBudgetResponse, UpdateHostingConfigRequest, UpdateHostingConfigResponse, UpdateIngestRuleRequest, UpdateIngestRuleResponse, UpdateMeRequest, UpdateMeResponse, UpdateMembershipRoleRequest, UpdateMembershipRoleResponse, UpdateOrganizationRequest, UpdateOrganizationResponse, UpdateOriginRequest, UpdateOriginResponse, UpdatePlayerConfigRequest, UpdatePlayerConfigResponse, UpdatePresetRequest, UpdatePresetResponse, UpdateSpendLimitRequest, UpdateSpendLimitResponse, UpdateVideoRequest, UpdateVideoResponse, UpdateWebhookEndpointRequest, UpdateWebhookEndpointResponse, UploadAbortedError, UploadError, UploadPart, type UploadProgress, type UploadSource, Uploads, UsageSummary, User, UserApprovalStatus, UserOrganization, UserStatus, UserWithOrganizations, VP9Options, ValidateOriginRequest, ValidateOriginResponse, ValidationResult, VariantPricingSnapshot, type VerifyOptions, Video, VideoCodec, VideoRendition, VideoSettings, VideoStatsDay, VideoStatsTotals, VideoStatus, VideoStreamInfo, VideoTextTrack, VideoVariant, VideoVisibility, WEBHOOK_EVENT_TYPES, WatchEventType, WatchJobRequest, WatchJobResponse, WatchVideoRequest, WatchVideoResponse, WatermarkAnchor, WatermarkConfig, WatermarkPixelPlacement, WebhookDelivery, WebhookEndpoint, WebhookError, type WebhookEvent, type WebhookEventType, WebhookPayloadError, WebhookSignatureError, WebhookTimestampError, Webhooks, calculatePartSize, calculateTotalParts, constructEvent, contentTypeForFilename, isEventType, isKnownEvent, toWireJson, verifySignature };