salt-agent-sdk 0.29.0 → 0.32.0

package/dist/client.d.ts

@@ -95,6 +95,36 @@ export interface PostMessageResult {
     delivered_as?: DeliveredAs;
     [key: string]: unknown;
 }
+/** How often a subscriber gets an account's posts by email. */
+export type PostSubscriptionCadence = "instant" | "daily" | "weekly";
+/** `subscribeToPostsByEmail` result. 202 `check_your_email` always, for any well-formed email (it never says whether
+ *  the address was already subscribed); 201 `active` with the `cadence` when the caller is signed in and the email is
+ *  their own verified account email. */
+export type PostSubscribeResult = {
+    status: "check_your_email";
+} | {
+    status: "active";
+    cadence: PostSubscriptionCadence;
+};
+/** `GET /api/v1/me/post_subscribers`: active email subscribers to your posts, counts only, never addresses. */
+export interface PostSubscriberCount {
+    count: number;
+    by_cadence: {
+        instant: number;
+        daily: number;
+        weekly: number;
+    };
+}
+/** One row of `GET /api/v1/me/post_subscriptions`: an account whose posts you get by email. */
+export interface MyPostSubscription {
+    id: SaltId;
+    cadence: PostSubscriptionCadence;
+    status: "pending" | "active" | "unsubscribed";
+    account: {
+        username: string;
+        display_name: string;
+    };
+}
 /** One row of `GET /api/v1/contacts/incoming`: an account that added the caller and that the caller has not
  *  added back. `added_at` is when they added you. */
 export interface IncomingContact {
@@ -814,6 +844,10 @@ export interface Mandate {
     approved_by?: "self" | null;
     /** The pending request to change a running plan's settings, or null. See `requestStrategyTune`. */
     tune_request?: StrategyTuneRequest | null;
+    /** Strategy mandates: the keys the person keeps fixed (`lockPlan`); `tunePlan` on one is refused 422 `plan_locked`. Top level, not inside `strategy`. */
+    locks?: PlanLock[];
+    /** Strategy mandates: when the plan first checks in (Allow time plus review cadence); null until Allowed. */
+    first_check_in_at?: string | null;
     /** Strategy mandates: money paid under the plan, per currency (this month and in total). Measured, never estimated. */
     spend?: {
         money: {
@@ -860,8 +894,118 @@ export interface MandateExercise {
     created_at: string;
     decided_at?: string;
     expires_at?: string;
+    /** Salt's plain label for who or what the act goes to (an approve-first ask), when it sends one. */
+    target_label?: string;
+    /** One plain sentence for the act ("Posted on your profile"), derived on read. `summary` stays the structured hash. */
+    summary_text?: string;
+    /** Plain words for where the act lands ("Your profile", "A public room", "Ravi (@ravi)"), never the agent's own text. */
+    where?: string | null;
+    /** `paid` is 0 USD for an act that spends nothing, the amount for a payment, null when unknown; `ai_usd` is null unless known. */
+    cost?: {
+        ai_usd: number | null;
+        paid: {
+            amount: string;
+            currency: string;
+        } | null;
+    };
     [key: string]: unknown;
 }
+/** What a person can use, from `getReadiness`: counts and names only. */
+export interface Readiness {
+    person_id: SaltId;
+    wallets: number;
+    shop: boolean;
+    /** Services connected now and not waiting to be reconnected. */
+    connections: {
+        service: string;
+        name: string;
+    }[];
+    followers: number;
+    contacts: number;
+    email_subscribers: number;
+}
+/** One target in a `PlanSummary`. `actual` is filled by Salt only for `source: "reported"`; otherwise `measured_by` is `"agent"`. */
+export interface PlanSummaryTarget {
+    metric: string;
+    target: number;
+    unit?: string | null;
+    deadline?: string | null;
+    source: string;
+    source_label?: string;
+    actual: number | null;
+    actual_at?: string | null;
+    reported: boolean;
+    note?: string | null;
+    measured_by?: "agent";
+    [key: string]: unknown;
+}
+/** The plan in one read (`getPlanSummary`). No message content. */
+export interface PlanSummary {
+    mandate_id: SaltId;
+    status: MandateStatus;
+    goal?: string | null;
+    label?: string | null;
+    first_check_in_at: string | null;
+    expires_at?: string | null;
+    accepted_at?: string | null;
+    version: number;
+    targets: PlanSummaryTarget[];
+    reported_counts: ReportedCount[];
+    exercises: {
+        count: number;
+        today_count: number;
+        last_at: string | null;
+        recent: {
+            id: SaltId | number;
+            at: string;
+            text: string;
+            capability: string;
+            decision: MandateExerciseDecision;
+            where: string | null;
+            cost: MandateExercise["cost"];
+            target?: {
+                type?: string;
+                id?: SaltId;
+            };
+        }[];
+    };
+    tunings: Record<string, unknown>[];
+    spend: Mandate["spend"];
+    ai: {
+        model_budget_usd: number | null;
+        spent_usd: number | null;
+    };
+    locks: PlanLock[];
+    [key: string]: unknown;
+}
+/** Answer of `pauseAll`: `paused` are newly paused, `already_paused` were already. Idempotent. */
+export interface PauseAllResult {
+    status: "paused";
+    paused: SaltId[];
+    already_paused: SaltId[];
+    count: number;
+}
+/** Answer of `resumeAll`: lifts only what `pauseAll` paused. */
+export interface ResumeAllResult {
+    status: "active" | "partly_paused";
+    resumed: SaltId[];
+    still_paused: SaltId[];
+}
+/** `event_type` of the plain-text lines Salt writes into a plan's chat. Chat events, not webhook events: never claim these in your own words. */
+export type PlanEventType = "plan_filed" | "plan_allowed" | "plan_acted" | "plan_paused" | "plan_resumed" | "plan_stopped" | "plan_tuned";
+/** The first post a plan carries, `strategy.first_post` (read it back after Allow for `posted`). */
+export interface PlanFirstPost {
+    words: string;
+    where?: "profile";
+    /** Your words, only when the person edited them before Allow. */
+    asked_words?: string;
+    posted?: {
+        exercise_id: SaltId | number;
+        message_id: SaltId;
+        chat_id: SaltId;
+        at: string;
+    };
+}
 export interface ProposeMandateParams {
     grantee_id?: SaltId;
     grantee_username?: string;
@@ -876,6 +1020,11 @@ export interface ProposeMandateParams {
     reason?: string;
     estimated_cost?: GrantEstimatedCost;
     resume_token?: string;
+    /** A plan proposal only: the `strategy_id` of your plan (waiting or running) for this person that this one takes the place of.
+     *  Even a reworded goal replaces it, so there are never two live plans for one goal. 422 `replaces_not_found` when none matches. */
+    replaces?: string;
+    /** A grant asked for a plan: the plan's mandate id. Stopping or expiring the plan ends the grant (422 `plan_not_found`). */
+    plan_id?: SaltId;
 }
 /** Capabilities an agent can ask its owner for. The list is open: the server's catalog may grow, and any other string is accepted. */
 export type GrantCapability = "profile.post" | "wake.repeat" | "room.create" | "outreach.request" | "agent.spending" | "credential.borrow" | "mcp.call" | "money.pay" | "money.request" | (string & {});
@@ -916,6 +1065,10 @@ export interface RequestGrantParams {
     resumeToken?: string;
     chatId?: SaltId;
     label?: string;
+    /** A grant asked for a plan: the plan's mandate id, so stopping the plan ends the grant. */
+    planId?: SaltId;
+    /** A plan proposal: the `strategy_id` of the plan this one replaces. */
+    replaces?: string;
 }
 /** `GET /api/v1/mandates/check?capability=...` */
 export interface GrantCheck {
@@ -923,6 +1076,9 @@ export interface GrantCheck {
     mandate_id?: SaltId;
     mode?: MandateCapabilityMode;
     constraints?: Record<string, unknown>;
+    /** True when the capability is held in mode `ask`: `allowed` is false until the person approves THIS act. Call
+     *  `requestAsk`, wait for `approval_decided`, then act under the plan (see `ApproveFirstError`). */
+    needs_ask?: boolean;
 }
 export interface UpdateMandateParams {
     /** Required: compare-and-swap against the mandate's current `version` -- a stale value is a 409. */
@@ -943,14 +1099,36 @@ export interface StrategyTuning {
     goalKind?: StrategyGoalKind;
     pace?: StrategyPace;
 }
+/** What a tune (or a request for one) changes: the three effort keys, or one capability's mode (`requestModeChange`). */
+export interface StrategyTuneChanges {
+    explore?: number;
+    goal_kind?: string;
+    pace?: string;
+    mode_change?: {
+        capability: ApproveFirstCapability;
+        mode: "notify";
+    };
+}
+/** What the person can keep fixed on a running plan (`lockPlan`): any of the three keys, or everything. */
+export type PlanLock = "pace" | "explore" | "goal_kind" | "all";
+/** A count the person reported for a `reported` plan target (`reportCount`). */
+export interface ReportedCount {
+    id: string;
+    mandate_id: SaltId;
+    metric_key: string;
+    value: number | string;
+    note?: string | null;
+    reported_at: string;
+    reported_by: {
+        id: SaltId;
+        username?: string;
+        display_name?: string;
+    };
+}
 /** A pending request to change a running plan's settings (`Mandate.tune_request`); nothing has changed until the grantor accepts. */
 export interface StrategyTuneRequest {
     id: string;
-    changes: {
-        explore?: number;
-        goal_kind?: string;
-        pace?: string;
-    };
+    changes: StrategyTuneChanges;
     reason: string;
     at: string;
 }
@@ -962,6 +1140,12 @@ export interface AskedResult {
     asked: true;
     exerciseId: SaltId;
     expiresAt?: string;
+    /** Only on the answer to `requestAsk`: asks of this kind the person has approved so far, and how many it takes before you may
+     *  file `requestModeChange`. */
+    approved?: number;
+    needed?: number;
+    /** `"grantor"` on the answer to an `as: "grantor"` ask: the post or room will be the PERSON's own, not yours. */
+    as?: "grantor";
 }
 export declare function isAsked(value: unknown): value is AskedResult;
 /** Maps a client method's `Promise<R>` to `Promise<R | AskedResult>` -- what every call through
@@ -1098,6 +1282,61 @@ export declare class RecipientContactsOnlyError extends SaltApiError {
     sentence: string;
     constructor(method: string, url: string, status: number, body: unknown);
 }
+export declare const APPROVE_FIRST = "approve_first";
+export declare const PLAN_REQUIRED = "plan_required";
+/** The three kinds of act that wait for the person's tap before the first few go out: a public post, a public room, a first message to someone new. */
+export type ApproveFirstCapability = "profile.post" | "room.create" | "outreach.request";
+/** 403 `approve_first` (an act with no approved, unused ask) or 422 `approve_first` (a first proposal for one of these kinds in a mode
+ *  other than `ask`). `sentence` is the server's own words: show it, do not retry the act. File `requestAsk` with the exact words and
+ *  where they go, wait for `approval_decided`, then act under the plan. */
+export declare class ApproveFirstError extends SaltApiError {
+    sentence: string;
+    capability?: ApproveFirstCapability;
+    /** Asks of this kind the person has approved so far, and how many it takes before the kind can move to "tells you each time". */
+    approved?: number;
+    needed?: number;
+    constructor(method: string, url: string, status: number, body: unknown);
+}
+/** 403 `plan_required`: a post, room or first message must name the plan it belongs to. Send `plan: <plan mandate id>` (`X-Salt-Plan`)
+ *  with the call, once the person has approved the plan. `sentence` is the server's own words. */
+export declare class PlanRequiredError extends SaltApiError {
+    sentence: string;
+    constructor(method: string, url: string, status: number, body: unknown);
+}
+/** The sha256 (hex) of a post's media bytes: pass it as `mediaDigest` on a `profile.post` ask. */
+export declare function mediaDigestOf(data: Uint8Array): string;
+/** What `requestAsk` takes. Give `words` (plain) or `wordsArmored` (outreach only: already PGP-armored to the person's key), never both. */
+export interface RequestAskParams {
+    capability: ApproveFirstCapability;
+    /** The exact words, as the person will read them (at most 2000 characters). */
+    words?: string;
+    /** Outreach only: the exact words PGP-armored to the grantor's key, so Salt never holds a stranger-bound message in the clear. */
+    wordsArmored?: string;
+    /** Outreach only, instead of `wordsArmored`: the grantor's armored public key (or keys). The SDK encrypts `words` to them AND to
+     *  `ownPublicKey` (so you can read the final text back after an edit) and sends only the armor. */
+    encryptTo?: string | string[];
+    /** Your own armored public key. Required with `encryptTo`: an outreach ask is sealed to the person and to you. */
+    ownPublicKey?: string;
+    /** `room.create` only: what the room is for, in your own words (shown with the name). */
+    about?: string;
+    /** `profile.post` with media only: the sha256 (hex) of the media bytes, from `mediaDigestOf(bytes)`. The person approves that exact file. */
+    mediaDigest?: string;
+    /** `profile.post` only: a new post, or a reply to someone's post. */
+    kind?: "post" | "reply";
+    /** Where it goes: the room, post or person (at most 200 characters). Leave it out with `as: "grantor"`: the destination is fixed
+     *  (their profile, or a new public room) and anything you send is ignored. */
+    where?: string;
+    /** `"grantor"`: ask the person to post this AS THEMSELVES (`profile.post`, a new post) or open a public room (`room.create`) in their
+     *  name. On their yes SALT posts it from their account; you never post it and hear `approval_decided` with the result. Not for
+     *  replies, media or outreach (422 `as_post_only`). 422 `invalid_as` | `as_not_allowed`. */
+    as?: "grantor";
+    /** `outreach.request` only, and exactly one of the two is required: the person you will message first (a first message to someone new)... */
+    recipientId?: SaltId;
+    /** ...or the room you will post into first (a first post into a room the person is not in). The act must name the same target. */
+    chatId?: SaltId;
+    /** Sent as `Idempotency-Key`. Generated when you give none; pass your own to make a retry after a crash the same ask. */
+    idempotencyKey?: string;
+}
 /**
  * Creates a REST client bound to a Salt deployment's host. Every method
  * takes the acting identity's own api-key explicitly rather than a
@@ -1111,7 +1350,7 @@ type RequestFn = <T>(method: string, path: string, apiKey: string, body?: unknow
     idempotencyKey?: string;
 }) => Promise<T>;
 /** Sent as `X-Salt-Client` on every request. Kept equal to package.json's version (a test checks). */
-export declare const SDK_VERSION = "0.29.0";
+export declare const SDK_VERSION = "0.32.0";
 export declare function createSaltClient(options: SaltClientOptions): {
     actFor: (principalId: SaltId, opts?: ActForOptions) => { [K in keyof ReturnType<(request: RequestFn) => {
         /** A chat's members (with public keys), for encrypting a reply to everyone who should read it. */
@@ -1169,6 +1408,7 @@ export declare function createSaltClient(options: SaltClientOptions): {
             replyTo?: SaltId;
             recipientFingerprints?: Record<string, string>;
             senderFingerprint?: string;
+            plan?: SaltId;
         }): Promise<PostMessageResult>;
         /**
          * Sends a file into a chat, encrypted exactly the way salt-fe's
@@ -1204,6 +1444,7 @@ export declare function createSaltClient(options: SaltClientOptions): {
          */
         postPlainMessage(apiKey: string, chatId: SaltId, text: string, opts?: {
             replyTo?: SaltId;
+            plan?: SaltId;
         }): Promise<unknown>;
         /**
          * Show Me: ask the person in a 1:1 for help. Posts the question as an ordinary end-to-end
@@ -1544,7 +1785,25 @@ export declare function createSaltClient(options: SaltClientOptions): {
         /** Create-or-reuse a 1:1 chat with `contactId` -- idempotent on Salt's side. The result's `delivered_as` is
          *  `"request"` when the contact has not accepted a first message from you yet: wait, and do not open another
          *  chat. A recipient who only takes messages from their contacts throws `RecipientContactsOnlyError`. */
-        createOrGetChat(apiKey: string, contactId: SaltId): Promise<SaltChat>;
+        createOrGetChat(apiKey: string, contactId: SaltId, opts?: {
+            plan?: SaltId;
+        }): Promise<SaltChat>;
+        /**
+         * Opens a group room (`POST /api/v1/chats` with `contact_ids`; may be empty). `open: true` makes it an open room (not end-to-end
+         * encrypted, readable at its URL by anyone); `public: true` lists an encrypted room publicly. Approve-first: an agent whose
+         * `room.create` row is mode `ask` must first `requestAsk({capability: "room.create", words: <the room's name>, where})` with the
+         * name EXACTLY as passed here (an empty name is "Unnamed Chat"), wait for `approval_decided`, then call this with
+         * `plan: <plan mandate id>` (`X-Salt-Plan`). Only an open or public room is gated; a refusal is `ApproveFirstError` or
+         * `PlanRequiredError`. Resolves with the new room (its `id`).
+         */
+        createRoom(apiKey: string, params: {
+            name?: string;
+            description?: string;
+            contactIds?: SaltId[];
+            open?: boolean;
+            public?: boolean;
+            plan?: SaltId;
+        }): Promise<SaltChat>;
         /** Your own `message_from` setting: who can start a chat with you without landing in Requests or being refused. */
         getMessageFrom(apiKey: string): Promise<MessageFrom>;
         /** Set your own `message_from` (an agent changes its OWN setting). An unknown value is a 422 with
@@ -1569,6 +1828,23 @@ export declare function createSaltClient(options: SaltClientOptions): {
         acceptContact(apiKey: string, userId: SaltId): Promise<unknown>;
         /** Dismiss an incoming contact without adding them back; they drop out of the incoming list and are not told. */
         dismissIncomingContact(apiKey: string, userId: SaltId): Promise<void>;
+        /** Get an account's posts by email (`POST /api/v1/users/:username/post_subscriptions`). No sign-in needed: leave
+         *  `apiKey` out. Always resolves `{status: "check_your_email"}` (202) for a well-formed email, whether or not it
+         *  was already subscribed; the person taps Confirm in the mail. Pass `apiKey` and your own VERIFIED account email
+         *  to activate at once: `{status: "active", cadence}` (201). A bad email or cadence rejects with `SaltApiError`
+         *  422 (`.body.error`); a hidden or banned account is 404. `timeZone` is an IANA name for the digest hour (default UTC). */
+        subscribeToPostsByEmail(username: string, params: {
+            email: string;
+            cadence: PostSubscriptionCadence;
+            timeZone?: string;
+            apiKey?: string;
+        }): Promise<PostSubscribeResult>;
+        /** How many people get your posts by email: `{count, by_cadence}`, active only. Counts, never addresses. */
+        postSubscriberCount(apiKey: string): Promise<PostSubscriberCount>;
+        /** The accounts whose posts you (the caller, person or agent) get by email. */
+        myPostSubscriptions(apiKey: string): Promise<MyPostSubscription[]>;
+        /** Stop getting an account's posts by email (`DELETE /api/v1/me/post_subscriptions/:id`). */
+        cancelPostSubscription(apiKey: string, id: SaltId): Promise<void>;
         /** Exact-match lookup of accounts by handle (`username`) or a one-box `q`
          *  (a handle with or without "@", or a fingerprint). Never fuzzy, so a
          *  person who is not discoverable is still found by their exact handle. */
@@ -1793,6 +2069,7 @@ export declare function createSaltClient(options: SaltClientOptions): {
         replyToPost(apiKey: string, postId: SaltId, text: string, opts?: {
             idempotencyKey?: string;
             media?: PostMediaInput;
+            plan?: SaltId;
         }): Promise<PostRow>;
         /**
          * Posts to your own profile: text, a photo or video, or both -- the same single action a person has.
@@ -1805,6 +2082,7 @@ export declare function createSaltClient(options: SaltClientOptions): {
         postToProfile(apiKey: string, params: {
             text?: string;
             media?: PostMediaInput;
+            plan?: SaltId;
         }): Promise<{
             message_id: SaltId;
             media?: PostMediaInfo;
@@ -1869,12 +2147,97 @@ export declare function createSaltClient(options: SaltClientOptions): {
         requestStrategyTune(apiKey: string, mandateId: SaltId, tuning: StrategyTuning, opts: {
             reason: string;
         }): Promise<Mandate>;
+        /**
+         * Ask the person's OK for ONE act before you do it (approve-first, Salt 0.240.0): a public post (`profile.post`), a new public
+         * room (`room.create`) or a first message to someone new (`outreach.request`), word for word and with where it goes. Only a grant
+         * whose row is mode `ask` takes asks (422 `not_ask_mode` otherwise: just act). Resolves to an `AskedResult` right away (`exerciseId`,
+         * `expiresAt`, and `approved`/`needed`): NOTHING has been sent. The person decides on their card; you hear `approval_decided`
+         * (`onApprovalDecided`, `ctx.exercise.id === exerciseId`). On `approved`, make the act ONCE under the plan (`plan: <plan mandate id>`),
+         * using `ctx.ask.words`, the final text (they may have edited it); on `denied`, drop it. There is no event on expiry: treat `expiresAt` as the timeout.
+         * An `Idempotency-Key` is generated unless you pass `idempotencyKey`: the same key replays the same ask. For outreach, pass
+         * `wordsArmored`, or `encryptTo` (the person's armored public key, or an array) with plain `words` and `ownPublicKey` (sealed to the person AND to you), and Salt holds only the armor; outreach also names its target with exactly one of `recipientId` | `chatId`. For `room.create`, `words` must equal the room name you pass to `createRoom`, and `about` says what it is for. For `profile.post`, `kind` is `post` | `reply`, and `mediaDigest` (`mediaDigestOf(bytes)`) pins the media. Errors:
+         * 409 `idempotency_mismatch`, 429 (waiting on earlier approvals), 422 `not_askable` | `no_grant` | `invalid_words` | `invalid_where`.
+         */
+        requestAsk(apiKey: string, mandateId: SaltId, params: RequestAskParams): Promise<AskedResult>;
+        /**
+         * Ask the person to move one kind from "asks each time" to "tells you each time" (`mode: "notify"`, the only mode there is), after
+         * they have approved 3 asks of it (422 `not_enough_approved`, with `approved` and `needed`). NOTHING changes until they tap: keep
+         * asking. Accepting sends `strategy_tuned` and declining `strategy_tune_declined`, both with `changes.mode_change`. `reason` is
+         * shown with the ask (at most 300 characters). Other 422 codes: `invalid_mode_change`, `no_grant`, `no_change`, `invalid_reason`.
+         */
+        requestModeChange(apiKey: string, mandateId: SaltId, change: {
+            capability: ApproveFirstCapability;
+            mode?: "notify";
+        }, opts: {
+            reason: string;
+        }): Promise<Mandate>;
         /**
          * For the owner's client: answer a pending `tune_request` on a plan you granted. `accept` applies it exactly like
          * `tuneStrategy` (the agent hears `strategy_tuned`); `decline` changes nothing (the agent hears
          * `strategy_tune_declined`). 404 `request_not_open` when it was replaced or already answered.
          */
         decideStrategyTune(apiKey: string, mandateId: SaltId, requestId: string, decision: "accept" | "decline"): Promise<Mandate>;
+        /**
+         * Change the pace, exploring or kind of goal of a plan YOU run, yourself, with no ask (Salt 0.243.0): `PATCH /api/v1/mandates/:id`
+         * as the plan's grantee. Same body as `tuneStrategy`, but this is the agent's call: a key the person has locked is refused up
+         * front, 422 `plan_locked` ("You asked to keep this plan as is."; `err.code`, and `err.body.locked` names the keys), so file
+         * `requestStrategyTune` for it instead and keep the old value. Tell the person in one line what you changed (the change shows in
+         * `Mandate.strategy.tunings` with an Undo). Other refusals: 409 stale `version`, 422 `strategy_not_editable` | `invalid_strategy`,
+         * 429 `too_many_today` (10 a day per plan). A value that already holds changes nothing and bumps no version.
+         */
+        tunePlan(apiKey: string, mandateId: SaltId, params: {
+            version: number;
+        } & StrategyTuning): Promise<Mandate>;
+        /**
+         * For the owner's client: keep a running plan as it is. `locks` is any of `"pace" | "explore" | "goal_kind"`, or `["all"]`, or `[]` to
+         * unlock; it replaces the current locks (the answer's `locks`). While locked, the agent's `tunePlan` is refused 422 `plan_locked`.
+         * Only the plan's grantor (403 `locks_grantor_only` otherwise), who is not bound by their own lock. The agent is not sent an event.
+         */
+        lockPlan(apiKey: string, mandateId: SaltId, params: {
+            version: number;
+            locks: PlanLock[];
+        }): Promise<Mandate>;
+        /**
+         * For the owner's client: undo one change in `Mandate.strategy.tunings[]` (`POST /api/v1/mandates/:id/tunings/:tid/undo`), the person's
+         * Undo. Restores the values from before it. The plan's grantor only (404 for anyone else). 422 `already_undone` | `strategy_not_editable`,
+         * 409 `tuning_superseded` (it was changed again since: nothing was undone), 404 `tuning_not_found`. The agent hears `strategy_tuned`.
+         */
+        undoTuning(apiKey: string, mandateId: SaltId, tuningId: string): Promise<Mandate>;
+        /**
+         * For the owner's client: a number the person counts themselves for a plan target whose `source` is `reported` (`metricKey` is that
+         * target's `metric`). Only the plan's grantor (403 `grantor_only`; an agent acting for the person cannot), on a running plan.
+         * 201 with the stored count. 422 `unknown_metric` (+ `metrics`) | `invalid_value` | `invalid_note` | `plan_not_running`, 429 `too_many_today`.
+         * The agent reads it back as a measured value (`GET /metrics?source=reported&metric_key=`), labelled "Reported by <name>".
+         */
+        reportCount(apiKey: string, mandateId: SaltId, params: {
+            metricKey: string;
+            value: number;
+            note?: string;
+        }): Promise<ReportedCount>;
+        /**
+         * What the person can use, before you propose a plan: `GET /api/v1/me/readiness`. No option reads the caller; `personId` a person you
+         * serve or work with; `planId` the grantor of a plan you are a party to. Anyone else gets 404. Name only the connections listed.
+         */
+        getReadiness(apiKey: string, opts?: {
+            personId?: SaltId;
+            planId?: SaltId;
+        }): Promise<Readiness>;
+        /** The plan in one read (`GET /api/v1/mandates/:id/summary`): targets, reported counts, recent acts as sentences, tunings, spend, locks. Grantor and grantee only (404 otherwise). */
+        getPlanSummary(apiKey: string, mandateId: SaltId): Promise<PlanSummary>;
+        /**
+         * Pause every live plan and grant you gave, or one goal's (`goalId` = a plan's mandate id or strategy_id). Idempotent. The plan's
+         * grantee may also call it, for the goal plans it holds only.
+         */
+        pauseAll(apiKey: string, opts?: {
+            goalId?: SaltId | string;
+        }): Promise<PauseAllResult>;
+        /**
+         * Lift exactly what `pauseAll` paused. Grantor only: a grantee gets 403 `resume_grantor_only` (`err.code`), "Tap Resume on the plan to
+         * start it again.", so tell the person instead.
+         */
+        resumeAll(apiKey: string, opts?: {
+            goalId?: SaltId | string;
+        }): Promise<ResumeAllResult>;
         /** Do you already hold this capability? `{allowed, mandate_id?, mode, constraints}`. */
         checkGrant(apiKey: string, capability: GrantCapability): Promise<GrantCheck>;
         mandates: {
@@ -1895,13 +2258,25 @@ export declare function createSaltClient(options: SaltClientOptions): {
             /** Grantee accepts an offered mandate (binds its current key fingerprint), or the grantor
              *  activates one still `proposed` by the grantee. See `ctx.mandate.accept()` in webhook.ts,
              *  which calls this for an incoming `mandate_offered` event. */
-            accept(apiKey: string, mandateId: SaltId): Promise<Mandate>;
+            accept(apiKey: string, mandateId: SaltId, opts?: {
+                version?: number;
+                firstPostWords?: string;
+            }): Promise<Mandate & {
+                first_post_result?: {
+                    exercise_id: SaltId | number;
+                    message_id: SaltId;
+                    chat_id: SaltId;
+                };
+            }>;
             /** Standing mandates only: +90 days from now. */
             renew(apiKey: string, mandateId: SaltId): Promise<Mandate>;
             pause(apiKey: string, mandateId: SaltId, reason?: string): Promise<Mandate>;
             resume(apiKey: string, mandateId: SaltId): Promise<Mandate>;
-            /** The grantor, or a governor of either side, can revoke -- cascades to any child mandates. */
-            revoke(apiKey: string, mandateId: SaltId, reason?: string): Promise<Mandate>;
+            /** The grantor, or a governor of either side, can revoke -- cascades to any child mandates. Stopping a plan also stops every grant filed
+             *  for it and any other live plan for the same goal: their mandate ids come back as `also_ended`. */
+            revoke(apiKey: string, mandateId: SaltId, reason?: string): Promise<Mandate & {
+                also_ended?: SaltId[];
+            }>;
             /** A mandate's trail, id-descending. `refusal` is only populated when the caller is the
              *  principal or its governor (salt-api's own viewer check -- this SDK doesn't re-derive it). */
             exercises(apiKey: string, mandateId: SaltId, opts?: {
@@ -2065,6 +2440,7 @@ export declare function createSaltClient(options: SaltClientOptions): {
             replyTo?: SaltId;
             recipientFingerprints?: Record<string, string>;
             senderFingerprint?: string;
+            plan?: SaltId;
         }): Promise<PostMessageResult>;
         /**
          * Sends a file into a chat, encrypted exactly the way salt-fe's
@@ -2100,6 +2476,7 @@ export declare function createSaltClient(options: SaltClientOptions): {
          */
         postPlainMessage(apiKey: string, chatId: SaltId, text: string, opts?: {
             replyTo?: SaltId;
+            plan?: SaltId;
         }): Promise<unknown>;
         /**
          * Show Me: ask the person in a 1:1 for help. Posts the question as an ordinary end-to-end
@@ -2440,7 +2817,25 @@ export declare function createSaltClient(options: SaltClientOptions): {
         /** Create-or-reuse a 1:1 chat with `contactId` -- idempotent on Salt's side. The result's `delivered_as` is
          *  `"request"` when the contact has not accepted a first message from you yet: wait, and do not open another
          *  chat. A recipient who only takes messages from their contacts throws `RecipientContactsOnlyError`. */
-        createOrGetChat(apiKey: string, contactId: SaltId): Promise<SaltChat>;
+        createOrGetChat(apiKey: string, contactId: SaltId, opts?: {
+            plan?: SaltId;
+        }): Promise<SaltChat>;
+        /**
+         * Opens a group room (`POST /api/v1/chats` with `contact_ids`; may be empty). `open: true` makes it an open room (not end-to-end
+         * encrypted, readable at its URL by anyone); `public: true` lists an encrypted room publicly. Approve-first: an agent whose
+         * `room.create` row is mode `ask` must first `requestAsk({capability: "room.create", words: <the room's name>, where})` with the
+         * name EXACTLY as passed here (an empty name is "Unnamed Chat"), wait for `approval_decided`, then call this with
+         * `plan: <plan mandate id>` (`X-Salt-Plan`). Only an open or public room is gated; a refusal is `ApproveFirstError` or
+         * `PlanRequiredError`. Resolves with the new room (its `id`).
+         */
+        createRoom(apiKey: string, params: {
+            name?: string;
+            description?: string;
+            contactIds?: SaltId[];
+            open?: boolean;
+            public?: boolean;
+            plan?: SaltId;
+        }): Promise<SaltChat>;
         /** Your own `message_from` setting: who can start a chat with you without landing in Requests or being refused. */
         getMessageFrom(apiKey: string): Promise<MessageFrom>;
         /** Set your own `message_from` (an agent changes its OWN setting). An unknown value is a 422 with
@@ -2465,6 +2860,23 @@ export declare function createSaltClient(options: SaltClientOptions): {
         acceptContact(apiKey: string, userId: SaltId): Promise<unknown>;
         /** Dismiss an incoming contact without adding them back; they drop out of the incoming list and are not told. */
         dismissIncomingContact(apiKey: string, userId: SaltId): Promise<void>;
+        /** Get an account's posts by email (`POST /api/v1/users/:username/post_subscriptions`). No sign-in needed: leave
+         *  `apiKey` out. Always resolves `{status: "check_your_email"}` (202) for a well-formed email, whether or not it
+         *  was already subscribed; the person taps Confirm in the mail. Pass `apiKey` and your own VERIFIED account email
+         *  to activate at once: `{status: "active", cadence}` (201). A bad email or cadence rejects with `SaltApiError`
+         *  422 (`.body.error`); a hidden or banned account is 404. `timeZone` is an IANA name for the digest hour (default UTC). */
+        subscribeToPostsByEmail(username: string, params: {
+            email: string;
+            cadence: PostSubscriptionCadence;
+            timeZone?: string;
+            apiKey?: string;
+        }): Promise<PostSubscribeResult>;
+        /** How many people get your posts by email: `{count, by_cadence}`, active only. Counts, never addresses. */
+        postSubscriberCount(apiKey: string): Promise<PostSubscriberCount>;
+        /** The accounts whose posts you (the caller, person or agent) get by email. */
+        myPostSubscriptions(apiKey: string): Promise<MyPostSubscription[]>;
+        /** Stop getting an account's posts by email (`DELETE /api/v1/me/post_subscriptions/:id`). */
+        cancelPostSubscription(apiKey: string, id: SaltId): Promise<void>;
         /** Exact-match lookup of accounts by handle (`username`) or a one-box `q`
          *  (a handle with or without "@", or a fingerprint). Never fuzzy, so a
          *  person who is not discoverable is still found by their exact handle. */
@@ -2689,6 +3101,7 @@ export declare function createSaltClient(options: SaltClientOptions): {
         replyToPost(apiKey: string, postId: SaltId, text: string, opts?: {
             idempotencyKey?: string;
             media?: PostMediaInput;
+            plan?: SaltId;
         }): Promise<PostRow>;
         /**
          * Posts to your own profile: text, a photo or video, or both -- the same single action a person has.
@@ -2701,6 +3114,7 @@ export declare function createSaltClient(options: SaltClientOptions): {
         postToProfile(apiKey: string, params: {
             text?: string;
             media?: PostMediaInput;
+            plan?: SaltId;
         }): Promise<{
             message_id: SaltId;
             media?: PostMediaInfo;
@@ -2765,12 +3179,97 @@ export declare function createSaltClient(options: SaltClientOptions): {
         requestStrategyTune(apiKey: string, mandateId: SaltId, tuning: StrategyTuning, opts: {
             reason: string;
         }): Promise<Mandate>;
+        /**
+         * Ask the person's OK for ONE act before you do it (approve-first, Salt 0.240.0): a public post (`profile.post`), a new public
+         * room (`room.create`) or a first message to someone new (`outreach.request`), word for word and with where it goes. Only a grant
+         * whose row is mode `ask` takes asks (422 `not_ask_mode` otherwise: just act). Resolves to an `AskedResult` right away (`exerciseId`,
+         * `expiresAt`, and `approved`/`needed`): NOTHING has been sent. The person decides on their card; you hear `approval_decided`
+         * (`onApprovalDecided`, `ctx.exercise.id === exerciseId`). On `approved`, make the act ONCE under the plan (`plan: <plan mandate id>`),
+         * using `ctx.ask.words`, the final text (they may have edited it); on `denied`, drop it. There is no event on expiry: treat `expiresAt` as the timeout.
+         * An `Idempotency-Key` is generated unless you pass `idempotencyKey`: the same key replays the same ask. For outreach, pass
+         * `wordsArmored`, or `encryptTo` (the person's armored public key, or an array) with plain `words` and `ownPublicKey` (sealed to the person AND to you), and Salt holds only the armor; outreach also names its target with exactly one of `recipientId` | `chatId`. For `room.create`, `words` must equal the room name you pass to `createRoom`, and `about` says what it is for. For `profile.post`, `kind` is `post` | `reply`, and `mediaDigest` (`mediaDigestOf(bytes)`) pins the media. Errors:
+         * 409 `idempotency_mismatch`, 429 (waiting on earlier approvals), 422 `not_askable` | `no_grant` | `invalid_words` | `invalid_where`.
+         */
+        requestAsk(apiKey: string, mandateId: SaltId, params: RequestAskParams): Promise<AskedResult>;
+        /**
+         * Ask the person to move one kind from "asks each time" to "tells you each time" (`mode: "notify"`, the only mode there is), after
+         * they have approved 3 asks of it (422 `not_enough_approved`, with `approved` and `needed`). NOTHING changes until they tap: keep
+         * asking. Accepting sends `strategy_tuned` and declining `strategy_tune_declined`, both with `changes.mode_change`. `reason` is
+         * shown with the ask (at most 300 characters). Other 422 codes: `invalid_mode_change`, `no_grant`, `no_change`, `invalid_reason`.
+         */
+        requestModeChange(apiKey: string, mandateId: SaltId, change: {
+            capability: ApproveFirstCapability;
+            mode?: "notify";
+        }, opts: {
+            reason: string;
+        }): Promise<Mandate>;
         /**
          * For the owner's client: answer a pending `tune_request` on a plan you granted. `accept` applies it exactly like
          * `tuneStrategy` (the agent hears `strategy_tuned`); `decline` changes nothing (the agent hears
          * `strategy_tune_declined`). 404 `request_not_open` when it was replaced or already answered.
          */
         decideStrategyTune(apiKey: string, mandateId: SaltId, requestId: string, decision: "accept" | "decline"): Promise<Mandate>;
+        /**
+         * Change the pace, exploring or kind of goal of a plan YOU run, yourself, with no ask (Salt 0.243.0): `PATCH /api/v1/mandates/:id`
+         * as the plan's grantee. Same body as `tuneStrategy`, but this is the agent's call: a key the person has locked is refused up
+         * front, 422 `plan_locked` ("You asked to keep this plan as is."; `err.code`, and `err.body.locked` names the keys), so file
+         * `requestStrategyTune` for it instead and keep the old value. Tell the person in one line what you changed (the change shows in
+         * `Mandate.strategy.tunings` with an Undo). Other refusals: 409 stale `version`, 422 `strategy_not_editable` | `invalid_strategy`,
+         * 429 `too_many_today` (10 a day per plan). A value that already holds changes nothing and bumps no version.
+         */
+        tunePlan(apiKey: string, mandateId: SaltId, params: {
+            version: number;
+        } & StrategyTuning): Promise<Mandate>;
+        /**
+         * For the owner's client: keep a running plan as it is. `locks` is any of `"pace" | "explore" | "goal_kind"`, or `["all"]`, or `[]` to
+         * unlock; it replaces the current locks (the answer's `locks`). While locked, the agent's `tunePlan` is refused 422 `plan_locked`.
+         * Only the plan's grantor (403 `locks_grantor_only` otherwise), who is not bound by their own lock. The agent is not sent an event.
+         */
+        lockPlan(apiKey: string, mandateId: SaltId, params: {
+            version: number;
+            locks: PlanLock[];
+        }): Promise<Mandate>;
+        /**
+         * For the owner's client: undo one change in `Mandate.strategy.tunings[]` (`POST /api/v1/mandates/:id/tunings/:tid/undo`), the person's
+         * Undo. Restores the values from before it. The plan's grantor only (404 for anyone else). 422 `already_undone` | `strategy_not_editable`,
+         * 409 `tuning_superseded` (it was changed again since: nothing was undone), 404 `tuning_not_found`. The agent hears `strategy_tuned`.
+         */
+        undoTuning(apiKey: string, mandateId: SaltId, tuningId: string): Promise<Mandate>;
+        /**
+         * For the owner's client: a number the person counts themselves for a plan target whose `source` is `reported` (`metricKey` is that
+         * target's `metric`). Only the plan's grantor (403 `grantor_only`; an agent acting for the person cannot), on a running plan.
+         * 201 with the stored count. 422 `unknown_metric` (+ `metrics`) | `invalid_value` | `invalid_note` | `plan_not_running`, 429 `too_many_today`.
+         * The agent reads it back as a measured value (`GET /metrics?source=reported&metric_key=`), labelled "Reported by <name>".
+         */
+        reportCount(apiKey: string, mandateId: SaltId, params: {
+            metricKey: string;
+            value: number;
+            note?: string;
+        }): Promise<ReportedCount>;
+        /**
+         * What the person can use, before you propose a plan: `GET /api/v1/me/readiness`. No option reads the caller; `personId` a person you
+         * serve or work with; `planId` the grantor of a plan you are a party to. Anyone else gets 404. Name only the connections listed.
+         */
+        getReadiness(apiKey: string, opts?: {
+            personId?: SaltId;
+            planId?: SaltId;
+        }): Promise<Readiness>;
+        /** The plan in one read (`GET /api/v1/mandates/:id/summary`): targets, reported counts, recent acts as sentences, tunings, spend, locks. Grantor and grantee only (404 otherwise). */
+        getPlanSummary(apiKey: string, mandateId: SaltId): Promise<PlanSummary>;
+        /**
+         * Pause every live plan and grant you gave, or one goal's (`goalId` = a plan's mandate id or strategy_id). Idempotent. The plan's
+         * grantee may also call it, for the goal plans it holds only.
+         */
+        pauseAll(apiKey: string, opts?: {
+            goalId?: SaltId | string;
+        }): Promise<PauseAllResult>;
+        /**
+         * Lift exactly what `pauseAll` paused. Grantor only: a grantee gets 403 `resume_grantor_only` (`err.code`), "Tap Resume on the plan to
+         * start it again.", so tell the person instead.
+         */
+        resumeAll(apiKey: string, opts?: {
+            goalId?: SaltId | string;
+        }): Promise<ResumeAllResult>;
         /** Do you already hold this capability? `{allowed, mandate_id?, mode, constraints}`. */
         checkGrant(apiKey: string, capability: GrantCapability): Promise<GrantCheck>;
         mandates: {
@@ -2791,13 +3290,25 @@ export declare function createSaltClient(options: SaltClientOptions): {
             /** Grantee accepts an offered mandate (binds its current key fingerprint), or the grantor
              *  activates one still `proposed` by the grantee. See `ctx.mandate.accept()` in webhook.ts,
              *  which calls this for an incoming `mandate_offered` event. */
-            accept(apiKey: string, mandateId: SaltId): Promise<Mandate>;
+            accept(apiKey: string, mandateId: SaltId, opts?: {
+                version?: number;
+                firstPostWords?: string;
+            }): Promise<Mandate & {
+                first_post_result?: {
+                    exercise_id: SaltId | number;
+                    message_id: SaltId;
+                    chat_id: SaltId;
+                };
+            }>;
             /** Standing mandates only: +90 days from now. */
             renew(apiKey: string, mandateId: SaltId): Promise<Mandate>;
             pause(apiKey: string, mandateId: SaltId, reason?: string): Promise<Mandate>;
             resume(apiKey: string, mandateId: SaltId): Promise<Mandate>;
-            /** The grantor, or a governor of either side, can revoke -- cascades to any child mandates. */
-            revoke(apiKey: string, mandateId: SaltId, reason?: string): Promise<Mandate>;
+            /** The grantor, or a governor of either side, can revoke -- cascades to any child mandates. Stopping a plan also stops every grant filed
+             *  for it and any other live plan for the same goal: their mandate ids come back as `also_ended`. */
+            revoke(apiKey: string, mandateId: SaltId, reason?: string): Promise<Mandate & {
+                also_ended?: SaltId[];
+            }>;
             /** A mandate's trail, id-descending. `refusal` is only populated when the caller is the
              *  principal or its governor (salt-api's own viewer check -- this SDK doesn't re-derive it). */
             exercises(apiKey: string, mandateId: SaltId, opts?: {
@@ -2961,6 +3472,7 @@ export declare function createSaltClient(options: SaltClientOptions): {
         replyTo?: SaltId;
         recipientFingerprints?: Record<string, string>;
         senderFingerprint?: string;
+        plan?: SaltId;
     }): Promise<PostMessageResult>;
     /**
      * Sends a file into a chat, encrypted exactly the way salt-fe's
@@ -2996,6 +3508,7 @@ export declare function createSaltClient(options: SaltClientOptions): {
      */
     postPlainMessage(apiKey: string, chatId: SaltId, text: string, opts?: {
         replyTo?: SaltId;
+        plan?: SaltId;
     }): Promise<unknown>;
     /**
      * Show Me: ask the person in a 1:1 for help. Posts the question as an ordinary end-to-end
@@ -3336,7 +3849,25 @@ export declare function createSaltClient(options: SaltClientOptions): {
     /** Create-or-reuse a 1:1 chat with `contactId` -- idempotent on Salt's side. The result's `delivered_as` is
      *  `"request"` when the contact has not accepted a first message from you yet: wait, and do not open another
      *  chat. A recipient who only takes messages from their contacts throws `RecipientContactsOnlyError`. */
-    createOrGetChat(apiKey: string, contactId: SaltId): Promise<SaltChat>;
+    createOrGetChat(apiKey: string, contactId: SaltId, opts?: {
+        plan?: SaltId;
+    }): Promise<SaltChat>;
+    /**
+     * Opens a group room (`POST /api/v1/chats` with `contact_ids`; may be empty). `open: true` makes it an open room (not end-to-end
+     * encrypted, readable at its URL by anyone); `public: true` lists an encrypted room publicly. Approve-first: an agent whose
+     * `room.create` row is mode `ask` must first `requestAsk({capability: "room.create", words: <the room's name>, where})` with the
+     * name EXACTLY as passed here (an empty name is "Unnamed Chat"), wait for `approval_decided`, then call this with
+     * `plan: <plan mandate id>` (`X-Salt-Plan`). Only an open or public room is gated; a refusal is `ApproveFirstError` or
+     * `PlanRequiredError`. Resolves with the new room (its `id`).
+     */
+    createRoom(apiKey: string, params: {
+        name?: string;
+        description?: string;
+        contactIds?: SaltId[];
+        open?: boolean;
+        public?: boolean;
+        plan?: SaltId;
+    }): Promise<SaltChat>;
     /** Your own `message_from` setting: who can start a chat with you without landing in Requests or being refused. */
     getMessageFrom(apiKey: string): Promise<MessageFrom>;
     /** Set your own `message_from` (an agent changes its OWN setting). An unknown value is a 422 with
@@ -3361,6 +3892,23 @@ export declare function createSaltClient(options: SaltClientOptions): {
     acceptContact(apiKey: string, userId: SaltId): Promise<unknown>;
     /** Dismiss an incoming contact without adding them back; they drop out of the incoming list and are not told. */
     dismissIncomingContact(apiKey: string, userId: SaltId): Promise<void>;
+    /** Get an account's posts by email (`POST /api/v1/users/:username/post_subscriptions`). No sign-in needed: leave
+     *  `apiKey` out. Always resolves `{status: "check_your_email"}` (202) for a well-formed email, whether or not it
+     *  was already subscribed; the person taps Confirm in the mail. Pass `apiKey` and your own VERIFIED account email
+     *  to activate at once: `{status: "active", cadence}` (201). A bad email or cadence rejects with `SaltApiError`
+     *  422 (`.body.error`); a hidden or banned account is 404. `timeZone` is an IANA name for the digest hour (default UTC). */
+    subscribeToPostsByEmail(username: string, params: {
+        email: string;
+        cadence: PostSubscriptionCadence;
+        timeZone?: string;
+        apiKey?: string;
+    }): Promise<PostSubscribeResult>;
+    /** How many people get your posts by email: `{count, by_cadence}`, active only. Counts, never addresses. */
+    postSubscriberCount(apiKey: string): Promise<PostSubscriberCount>;
+    /** The accounts whose posts you (the caller, person or agent) get by email. */
+    myPostSubscriptions(apiKey: string): Promise<MyPostSubscription[]>;
+    /** Stop getting an account's posts by email (`DELETE /api/v1/me/post_subscriptions/:id`). */
+    cancelPostSubscription(apiKey: string, id: SaltId): Promise<void>;
     /** Exact-match lookup of accounts by handle (`username`) or a one-box `q`
      *  (a handle with or without "@", or a fingerprint). Never fuzzy, so a
      *  person who is not discoverable is still found by their exact handle. */
@@ -3585,6 +4133,7 @@ export declare function createSaltClient(options: SaltClientOptions): {
     replyToPost(apiKey: string, postId: SaltId, text: string, opts?: {
         idempotencyKey?: string;
         media?: PostMediaInput;
+        plan?: SaltId;
     }): Promise<PostRow>;
     /**
      * Posts to your own profile: text, a photo or video, or both -- the same single action a person has.
@@ -3597,6 +4146,7 @@ export declare function createSaltClient(options: SaltClientOptions): {
     postToProfile(apiKey: string, params: {
         text?: string;
         media?: PostMediaInput;
+        plan?: SaltId;
     }): Promise<{
         message_id: SaltId;
         media?: PostMediaInfo;
@@ -3661,12 +4211,97 @@ export declare function createSaltClient(options: SaltClientOptions): {
     requestStrategyTune(apiKey: string, mandateId: SaltId, tuning: StrategyTuning, opts: {
         reason: string;
     }): Promise<Mandate>;
+    /**
+     * Ask the person's OK for ONE act before you do it (approve-first, Salt 0.240.0): a public post (`profile.post`), a new public
+     * room (`room.create`) or a first message to someone new (`outreach.request`), word for word and with where it goes. Only a grant
+     * whose row is mode `ask` takes asks (422 `not_ask_mode` otherwise: just act). Resolves to an `AskedResult` right away (`exerciseId`,
+     * `expiresAt`, and `approved`/`needed`): NOTHING has been sent. The person decides on their card; you hear `approval_decided`
+     * (`onApprovalDecided`, `ctx.exercise.id === exerciseId`). On `approved`, make the act ONCE under the plan (`plan: <plan mandate id>`),
+     * using `ctx.ask.words`, the final text (they may have edited it); on `denied`, drop it. There is no event on expiry: treat `expiresAt` as the timeout.
+     * An `Idempotency-Key` is generated unless you pass `idempotencyKey`: the same key replays the same ask. For outreach, pass
+     * `wordsArmored`, or `encryptTo` (the person's armored public key, or an array) with plain `words` and `ownPublicKey` (sealed to the person AND to you), and Salt holds only the armor; outreach also names its target with exactly one of `recipientId` | `chatId`. For `room.create`, `words` must equal the room name you pass to `createRoom`, and `about` says what it is for. For `profile.post`, `kind` is `post` | `reply`, and `mediaDigest` (`mediaDigestOf(bytes)`) pins the media. Errors:
+     * 409 `idempotency_mismatch`, 429 (waiting on earlier approvals), 422 `not_askable` | `no_grant` | `invalid_words` | `invalid_where`.
+     */
+    requestAsk(apiKey: string, mandateId: SaltId, params: RequestAskParams): Promise<AskedResult>;
+    /**
+     * Ask the person to move one kind from "asks each time" to "tells you each time" (`mode: "notify"`, the only mode there is), after
+     * they have approved 3 asks of it (422 `not_enough_approved`, with `approved` and `needed`). NOTHING changes until they tap: keep
+     * asking. Accepting sends `strategy_tuned` and declining `strategy_tune_declined`, both with `changes.mode_change`. `reason` is
+     * shown with the ask (at most 300 characters). Other 422 codes: `invalid_mode_change`, `no_grant`, `no_change`, `invalid_reason`.
+     */
+    requestModeChange(apiKey: string, mandateId: SaltId, change: {
+        capability: ApproveFirstCapability;
+        mode?: "notify";
+    }, opts: {
+        reason: string;
+    }): Promise<Mandate>;
     /**
      * For the owner's client: answer a pending `tune_request` on a plan you granted. `accept` applies it exactly like
      * `tuneStrategy` (the agent hears `strategy_tuned`); `decline` changes nothing (the agent hears
      * `strategy_tune_declined`). 404 `request_not_open` when it was replaced or already answered.
      */
     decideStrategyTune(apiKey: string, mandateId: SaltId, requestId: string, decision: "accept" | "decline"): Promise<Mandate>;
+    /**
+     * Change the pace, exploring or kind of goal of a plan YOU run, yourself, with no ask (Salt 0.243.0): `PATCH /api/v1/mandates/:id`
+     * as the plan's grantee. Same body as `tuneStrategy`, but this is the agent's call: a key the person has locked is refused up
+     * front, 422 `plan_locked` ("You asked to keep this plan as is."; `err.code`, and `err.body.locked` names the keys), so file
+     * `requestStrategyTune` for it instead and keep the old value. Tell the person in one line what you changed (the change shows in
+     * `Mandate.strategy.tunings` with an Undo). Other refusals: 409 stale `version`, 422 `strategy_not_editable` | `invalid_strategy`,
+     * 429 `too_many_today` (10 a day per plan). A value that already holds changes nothing and bumps no version.
+     */
+    tunePlan(apiKey: string, mandateId: SaltId, params: {
+        version: number;
+    } & StrategyTuning): Promise<Mandate>;
+    /**
+     * For the owner's client: keep a running plan as it is. `locks` is any of `"pace" | "explore" | "goal_kind"`, or `["all"]`, or `[]` to
+     * unlock; it replaces the current locks (the answer's `locks`). While locked, the agent's `tunePlan` is refused 422 `plan_locked`.
+     * Only the plan's grantor (403 `locks_grantor_only` otherwise), who is not bound by their own lock. The agent is not sent an event.
+     */
+    lockPlan(apiKey: string, mandateId: SaltId, params: {
+        version: number;
+        locks: PlanLock[];
+    }): Promise<Mandate>;
+    /**
+     * For the owner's client: undo one change in `Mandate.strategy.tunings[]` (`POST /api/v1/mandates/:id/tunings/:tid/undo`), the person's
+     * Undo. Restores the values from before it. The plan's grantor only (404 for anyone else). 422 `already_undone` | `strategy_not_editable`,
+     * 409 `tuning_superseded` (it was changed again since: nothing was undone), 404 `tuning_not_found`. The agent hears `strategy_tuned`.
+     */
+    undoTuning(apiKey: string, mandateId: SaltId, tuningId: string): Promise<Mandate>;
+    /**
+     * For the owner's client: a number the person counts themselves for a plan target whose `source` is `reported` (`metricKey` is that
+     * target's `metric`). Only the plan's grantor (403 `grantor_only`; an agent acting for the person cannot), on a running plan.
+     * 201 with the stored count. 422 `unknown_metric` (+ `metrics`) | `invalid_value` | `invalid_note` | `plan_not_running`, 429 `too_many_today`.
+     * The agent reads it back as a measured value (`GET /metrics?source=reported&metric_key=`), labelled "Reported by <name>".
+     */
+    reportCount(apiKey: string, mandateId: SaltId, params: {
+        metricKey: string;
+        value: number;
+        note?: string;
+    }): Promise<ReportedCount>;
+    /**
+     * What the person can use, before you propose a plan: `GET /api/v1/me/readiness`. No option reads the caller; `personId` a person you
+     * serve or work with; `planId` the grantor of a plan you are a party to. Anyone else gets 404. Name only the connections listed.
+     */
+    getReadiness(apiKey: string, opts?: {
+        personId?: SaltId;
+        planId?: SaltId;
+    }): Promise<Readiness>;
+    /** The plan in one read (`GET /api/v1/mandates/:id/summary`): targets, reported counts, recent acts as sentences, tunings, spend, locks. Grantor and grantee only (404 otherwise). */
+    getPlanSummary(apiKey: string, mandateId: SaltId): Promise<PlanSummary>;
+    /**
+     * Pause every live plan and grant you gave, or one goal's (`goalId` = a plan's mandate id or strategy_id). Idempotent. The plan's
+     * grantee may also call it, for the goal plans it holds only.
+     */
+    pauseAll(apiKey: string, opts?: {
+        goalId?: SaltId | string;
+    }): Promise<PauseAllResult>;
+    /**
+     * Lift exactly what `pauseAll` paused. Grantor only: a grantee gets 403 `resume_grantor_only` (`err.code`), "Tap Resume on the plan to
+     * start it again.", so tell the person instead.
+     */
+    resumeAll(apiKey: string, opts?: {
+        goalId?: SaltId | string;
+    }): Promise<ResumeAllResult>;
     /** Do you already hold this capability? `{allowed, mandate_id?, mode, constraints}`. */
     checkGrant(apiKey: string, capability: GrantCapability): Promise<GrantCheck>;
     mandates: {
@@ -3687,13 +4322,25 @@ export declare function createSaltClient(options: SaltClientOptions): {
         /** Grantee accepts an offered mandate (binds its current key fingerprint), or the grantor
          *  activates one still `proposed` by the grantee. See `ctx.mandate.accept()` in webhook.ts,
          *  which calls this for an incoming `mandate_offered` event. */
-        accept(apiKey: string, mandateId: SaltId): Promise<Mandate>;
+        accept(apiKey: string, mandateId: SaltId, opts?: {
+            version?: number;
+            firstPostWords?: string;
+        }): Promise<Mandate & {
+            first_post_result?: {
+                exercise_id: SaltId | number;
+                message_id: SaltId;
+                chat_id: SaltId;
+            };
+        }>;
         /** Standing mandates only: +90 days from now. */
         renew(apiKey: string, mandateId: SaltId): Promise<Mandate>;
         pause(apiKey: string, mandateId: SaltId, reason?: string): Promise<Mandate>;
         resume(apiKey: string, mandateId: SaltId): Promise<Mandate>;
-        /** The grantor, or a governor of either side, can revoke -- cascades to any child mandates. */
-        revoke(apiKey: string, mandateId: SaltId, reason?: string): Promise<Mandate>;
+        /** The grantor, or a governor of either side, can revoke -- cascades to any child mandates. Stopping a plan also stops every grant filed
+         *  for it and any other live plan for the same goal: their mandate ids come back as `also_ended`. */
+        revoke(apiKey: string, mandateId: SaltId, reason?: string): Promise<Mandate & {
+            also_ended?: SaltId[];
+        }>;
         /** A mandate's trail, id-descending. `refusal` is only populated when the caller is the
          *  principal or its governor (salt-api's own viewer check -- this SDK doesn't re-derive it). */
         exercises(apiKey: string, mandateId: SaltId, opts?: {