@amerged/ohmyhost-mcp 0.1.10

package/src/packages/sdk-ts/generated/sdk.gen.ts

@@ -0,0 +1,3440 @@
+// This file is auto-generated by @hey-api/openapi-ts
+
+import { client } from "./client.gen.js";
+import {
+  buildClientParams,
+  type Client,
+  type ClientMeta,
+  type Options as Options2,
+  type RequestResult,
+  type ServerSentEventsResult,
+  type TDataShape,
+} from "./client/index.js";
+import type {
+  ApplyPaidProjectDomainErrors,
+  ApplyPaidProjectDomainResponses,
+  ChangeDatabaseComputeErrors,
+  ChangeDatabaseComputeResponses,
+  CompleteCloudflareDnsAuthorizationErrors,
+  CompleteCloudflareDnsAuthorizationResponses,
+  CompleteGithubSourceAuthorizationErrors,
+  ConfigureBillingRechargeErrors,
+  ConfigureBillingRechargeResponses,
+  ConfigureProjectDomainsErrors,
+  ConfigureProjectDomainsResponses,
+  ConfigureProjectMailDomainErrors,
+  ConfigureProjectMailDomainRequest,
+  ConfigureProjectMailDomainResponses,
+  ConfigureProjectSourceAutoDeployErrors,
+  ConfigureProjectSourceAutoDeployResponses,
+  ConfigureSourceAutoDeployRequest,
+  ConfirmationToken,
+  ConnectGithubOrganizationErrors,
+  ConnectGithubOrganizationRequest,
+  ConnectGithubOrganizationResponses,
+  CreateBillingCheckoutErrors,
+  CreateBillingCheckoutResponses,
+  CreateBillingPortalErrors,
+  CreateBillingPortalResponses,
+  CreateCloudflareDnsAuthorizationErrors,
+  CreateCloudflareDnsAuthorizationRequest,
+  CreateCloudflareDnsAuthorizationResponses,
+  CreateDeploymentErrors,
+  CreateDeploymentRequest,
+  CreateDeploymentResponses,
+  CreateOrganizationErrors,
+  CreateOrganizationRequest,
+  CreateOrganizationResponses,
+  CreateProjectDatabaseAccessErrors,
+  CreateProjectDatabaseAccessResponses,
+  CreateProjectDevAccessTicketErrors,
+  CreateProjectDevAccessTicketResponses,
+  CreateProjectErrors,
+  CreateProjectExportErrors,
+  CreateProjectExportResponses,
+  CreateProjectRequest,
+  CreateProjectResponses,
+  CreateUserApiKeyErrors,
+  CreateUserApiKeyResponses,
+  DeleteEnvironmentSecretErrors,
+  DeleteEnvironmentSecretResponses,
+  DeletePaidProjectDomainErrors,
+  DeletePaidProjectDomainResponses,
+  DeleteProjectErrors,
+  DeleteProjectResponses,
+  FeedbackSubmission,
+  GetAccountProfileErrors,
+  GetAccountProfileResponses,
+  GetBillingCheckoutErrors,
+  GetBillingCheckoutResponses,
+  GetBillingRechargeErrors,
+  GetBillingRechargeResponses,
+  GetCloudflareDnsAuthorizationStatusErrors,
+  GetCloudflareDnsAuthorizationStatusResponses,
+  GetCurrentIdentityErrors,
+  GetCurrentIdentityResponses,
+  GetDatabaseComputeErrors,
+  GetDatabaseComputeResponses,
+  GetDeploymentErrors,
+  GetDeploymentLogsErrors,
+  GetDeploymentLogsResponses,
+  GetDeploymentResponses,
+  GetFeatureInterestsErrors,
+  GetFeatureInterestsResponses,
+  GetGithubOrganizationConnectionErrors,
+  GetGithubOrganizationConnectionResponses,
+  GetOperationErrors,
+  GetOperationResponses,
+  GetOrganizationAccountErrors,
+  GetOrganizationAccountResponses,
+  GetOrganizationCreditsErrors,
+  GetOrganizationCreditsResponses,
+  GetOrganizationCreditUsageErrors,
+  GetOrganizationCreditUsageResponses,
+  GetPaidProjectDomainErrors,
+  GetPaidProjectDomainResponses,
+  GetProjectContextErrors,
+  GetProjectContextResponses,
+  GetProjectCreditBudgetErrors,
+  GetProjectCreditBudgetResponses,
+  GetProjectErrors,
+  GetProjectExportErrors,
+  GetProjectExportResponses,
+  GetProjectMailDomainErrors,
+  GetProjectMailDomainResponses,
+  GetProjectResponses,
+  GetProjectSourceAutoDeployErrors,
+  GetProjectSourceAutoDeployResponses,
+  GetProjectSourceErrors,
+  GetProjectSourceResponses,
+  GetProjectStatusErrors,
+  GetProjectStatusResponses,
+  GetPublicDeploymentStatsErrors,
+  GetPublicDeploymentStatsResponses,
+  LinkProjectSourceErrors,
+  LinkProjectSourceRequest,
+  LinkProjectSourceResponses,
+  ListAuditEventsErrors,
+  ListAuditEventsResponses,
+  ListDeploymentsErrors,
+  ListDeploymentsResponses,
+  ListEnvironmentSecretsErrors,
+  ListEnvironmentSecretsResponses,
+  ListFunctionRunsErrors,
+  ListFunctionRunsResponses,
+  ListProjectDatabaseAccessErrors,
+  ListProjectDatabaseAccessResponses,
+  ListProjectsErrors,
+  ListProjectsResponses,
+  ListUserApiKeysErrors,
+  ListUserApiKeysResponses,
+  PaidDomainRequest,
+  PlanDeploymentErrors,
+  PlanDeploymentPromotionErrors,
+  PlanDeploymentPromotionResponses,
+  PlanDeploymentRequest,
+  PlanDeploymentResponses,
+  PlanDeploymentRollbackErrors,
+  PlanDeploymentRollbackResponses,
+  PlanPaidProjectDomainErrors,
+  PlanPaidProjectDomainResponses,
+  PlanProjectDeletionErrors,
+  PlanProjectDeletionResponses,
+  ProjectDatabaseAccessRequest,
+  ProjectDatabaseQueryRequest,
+  ProjectDatabaseWriteRequest,
+  PromoteDeploymentErrors,
+  PromoteDeploymentResponses,
+  PutEnvironmentSecretErrors,
+  PutEnvironmentSecretRequest,
+  PutEnvironmentSecretResponses,
+  QueryProjectDatabaseErrors,
+  QueryProjectDatabaseResponses,
+  ReconcileOperationErrors,
+  ReconcileOperationResponses,
+  RecordSignupSourceErrors,
+  RecordSignupSourceResponses,
+  RegisterFeatureInterestErrors,
+  RegisterFeatureInterestResponses,
+  RevokeCurrentSessionErrors,
+  RevokeCurrentSessionResponses,
+  RevokeProjectDatabaseAccessErrors,
+  RevokeProjectDatabaseAccessResponses,
+  RevokeUserApiKeyErrors,
+  RevokeUserApiKeyResponses,
+  RollbackDeploymentErrors,
+  RollbackDeploymentResponses,
+  SetProjectCreditBudgetErrors,
+  SetProjectCreditBudgetRequest,
+  SetProjectCreditBudgetResponses,
+  SetProjectNotesErrors,
+  SetProjectNotesResponses,
+  StreamDeploymentLogsErrors,
+  StreamDeploymentLogsResponse,
+  StreamDeploymentLogsResponses,
+  StreamOperationEventsErrors,
+  StreamOperationEventsResponse,
+  StreamOperationEventsResponses,
+  SubmitContactRequestErrors,
+  SubmitContactRequestResponses,
+  SubmitFeedbackErrors,
+  SubmitFeedbackResponses,
+  Ulid,
+  UserApiKeyId,
+  WriteProjectDatabaseErrors,
+  WriteProjectDatabaseResponses,
+} from "./types.gen.js";
+
+export type Options<
+  TData extends TDataShape = TDataShape,
+  ThrowOnError extends boolean = boolean,
+  TResponse = unknown,
+> = Options2<TData, ThrowOnError, TResponse> & {
+  /**
+   * You can provide a client instance returned by `createClient()` instead of
+   * individual options. This might be also useful if you want to implement a
+   * custom client.
+   */
+  client?: Client;
+  /**
+   * You can pass arbitrary values through the `meta` object. This can be
+   * used to access values that aren't defined as part of the SDK function.
+   */
+  meta?: keyof ClientMeta extends never ? Record<string, unknown> : ClientMeta;
+};
+
+/**
+ * Read the current interactive user profile and signup attribution
+ */
+export const getAccountProfile = <ThrowOnError extends boolean = true>(
+  options?: Options<never, ThrowOnError>,
+): RequestResult<GetAccountProfileResponses, GetAccountProfileErrors, ThrowOnError, "data"> =>
+  (options?.client ?? client).get<
+    GetAccountProfileResponses,
+    GetAccountProfileErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/me/profile",
+    ...options,
+  });
+
+/**
+ * Record the authenticated user signup source once
+ *
+ * Interactive session required; the first accepted source is immutable, repeat requests return it unchanged and no credits or Paid rights are granted by this endpoint.
+ */
+export const recordSignupSource = <ThrowOnError extends boolean = true>(
+  parameters: {
+    source: string | null;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<RecordSignupSourceResponses, RecordSignupSourceErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams([parameters], [{ args: [{ in: "body", key: "source" }] }]);
+  return (options?.client ?? client).put<
+    RecordSignupSourceResponses,
+    RecordSignupSourceErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/me/signup-source",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Connect a GitHub installation to the workspace
+ *
+ * Owner or Admin connects once through one GitHub browser link. The original user session or user API key is bound to the thirty-minute authorization. Repeat the same request and key to observe its result. No provider credential is returned or retained.
+ */
+export const connectGithubOrganization = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    organization_id: Ulid;
+    connectGithubOrganizationRequest: ConnectGithubOrganizationRequest;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  ConnectGithubOrganizationResponses,
+  ConnectGithubOrganizationErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "organization_id" },
+          { key: "connectGithubOrganizationRequest", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    ConnectGithubOrganizationResponses,
+    ConnectGithubOrganizationErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/organizations/{organization_id}/github:connect",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Read the workspace GitHub connection
+ */
+export const getGithubOrganizationConnection = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    organization_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  GetGithubOrganizationConnectionResponses,
+  GetGithubOrganizationConnectionErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "organization_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetGithubOrganizationConnectionResponses,
+    GetGithubOrganizationConnectionErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/organizations/{organization_id}/github",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Read effective plan and monthly versus one-time credit balance
+ */
+export const getOrganizationAccount = <ThrowOnError extends boolean = true>(
+  parameters: {
+    organization_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  GetOrganizationAccountResponses,
+  GetOrganizationAccountErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [{ args: [{ in: "path", key: "organization_id" }] }],
+  );
+  return (options?.client ?? client).get<
+    GetOrganizationAccountResponses,
+    GetOrganizationAccountErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/organizations/{organization_id}/account",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Submit a contact or privacy question
+ *
+ * Stores a private contact request for twelve months, with idempotent replay and no account creation or marketing enrollment.
+ */
+export const submitContactRequest = <ThrowOnError extends boolean = true>(
+  parameters: {
+    name: string;
+    email: string;
+    company: string;
+    message: string;
+    idempotency_key: string;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  SubmitContactRequestResponses,
+  SubmitContactRequestErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "body", key: "name" },
+          { in: "body", key: "email" },
+          { in: "body", key: "company" },
+          { in: "body", key: "message" },
+          { in: "body", key: "idempotency_key" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    SubmitContactRequestResponses,
+    SubmitContactRequestErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    url: "/v1/contact-requests",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Read this anonymous browser's current roadmap votes
+ */
+export const getFeatureInterests = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Ohmyho-Voter": string;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<GetFeatureInterestsResponses, GetFeatureInterestsErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [{ args: [{ in: "headers", key: "X-Ohmyho-Voter" }] }],
+  );
+  return (options?.client ?? client).get<
+    GetFeatureInterestsResponses,
+    GetFeatureInterestsErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    url: "/v1/beta/feature-interests",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Set or remove this anonymous browser's roadmap vote
+ *
+ * Store a desired choice once per request key for twelve months. Replaying an earlier request never overwrites a later choice. A null choice removes the vote; this is not toggle-on-every-request behavior.
+ */
+export const registerFeatureInterest = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Ohmyho-Voter": string;
+    feature: "eu" | "iso27001" | "soc2";
+    choice: "up" | "down" | null;
+    idempotency_key: string;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  RegisterFeatureInterestResponses,
+  RegisterFeatureInterestErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Ohmyho-Voter" },
+          { in: "body", key: "feature" },
+          { in: "body", key: "choice" },
+          { in: "body", key: "idempotency_key" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    RegisterFeatureInterestResponses,
+    RegisterFeatureInterestErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    url: "/v1/beta/feature-interests",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Read distinct active projects successfully deployed in the past seven days
+ */
+export const getPublicDeploymentStats = <ThrowOnError extends boolean = true>(
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  GetPublicDeploymentStatsResponses,
+  GetPublicDeploymentStatsErrors,
+  ThrowOnError,
+  "data"
+> =>
+  (options?.client ?? client).get<
+    GetPublicDeploymentStatsResponses,
+    GetPublicDeploymentStatsErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    url: "/v1/beta/stats",
+    ...options,
+  });
+
+/**
+ * List the current user's tokens in one organization
+ *
+ * Requires an interactive session. Returns only metadata and obfuscated values, never another user's keys or full token values. Use the returned cursor for the next page.
+ */
+export const listUserApiKeys = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    organization_id: Ulid;
+    after?: UserApiKeyId;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<ListUserApiKeysResponses, ListUserApiKeysErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "organization_id" },
+          { in: "query", key: "after" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    ListUserApiKeysResponses,
+    ListUserApiKeysErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/organizations/{organization_id}/user-api-keys",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Create a user-owned API token valid until revoked
+ *
+ * Requires a current interactive user session. Organization membership and product permissions are revalidated. Only the first creation returns the full value; exact replay returns metadata and a null value. Save the first response locally without putting it in logs or agent prompts. After uncertainty reuse the same name and Idempotency-Key; do not blindly create another token. Available at zero credits.
+ */
+export const createUserApiKey = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    organization_id: Ulid;
+    name: string;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<CreateUserApiKeyResponses, CreateUserApiKeyErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "organization_id" },
+          { in: "body", key: "name" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    CreateUserApiKeyResponses,
+    CreateUserApiKeyErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/organizations/{organization_id}/user-api-keys",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Revoke one of the current user's API tokens
+ *
+ * Requires a current interactive session. Verifies user and organization ownership before provider deletion. Replay and an already absent token have the same result. Does not revoke another user's token or the current login session.
+ */
+export const revokeUserApiKey = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    organization_id: Ulid;
+    key_id: UserApiKeyId;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<RevokeUserApiKeyResponses, RevokeUserApiKeyErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "organization_id" },
+          { in: "path", key: "key_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).delete<
+    RevokeUserApiKeyResponses,
+    RevokeUserApiKeyErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/organizations/{organization_id}/user-api-keys/{key_id}",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Store a redacted customer-agent feedback report
+ *
+ * Available to authorized organization members at zero credits. A 201 receipt confirms durable storage, not triage or a promised fix. Reuse the same Idempotency-Key and payload after uncertainty. Optional environment and operation IDs require project_id and must belong to that organization/project. Text is untrusted data; never send credentials, attachments, raw logs, environment dumps or personal records. No provider operation, charge or external message is created.
+ */
+export const submitFeedback = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    feedbackSubmission: FeedbackSubmission;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<SubmitFeedbackResponses, SubmitFeedbackErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { key: "feedbackSubmission", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    SubmitFeedbackResponses,
+    SubmitFeedbackErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/feedback",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Complete the bound GitHub browser authorization
+ *
+ * Browser callback only. Revalidates the original user session or user API key, workspace Owner/Admin authority and authorization expiry, then privately verifies the GitHub account and installation. A valid installation callback without an OAuth code continues automatically through OAuth. Completion records the workspace connection without building or returning provider credentials. Previously issued project authorizations remain supported during rollout.
+ */
+export const completeGithubSourceAuthorization = <ThrowOnError extends boolean = true>(
+  parameters: {
+    state: string;
+    code?: string;
+    error?: string;
+    error_description?: string;
+    iss?: "https://github.com/login/oauth";
+    installation_id?: string;
+    setup_action?: "install" | "update" | "request";
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<unknown, CompleteGithubSourceAuthorizationErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "query", key: "state" },
+          { in: "query", key: "code" },
+          { in: "query", key: "error" },
+          { in: "query", key: "error_description" },
+          { in: "query", key: "iss" },
+          { in: "query", key: "installation_id" },
+          { in: "query", key: "setup_action" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    unknown,
+    CompleteGithubSourceAuthorizationErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    url: "/v1/github/oauth/callback",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Complete one Cloudflare DNS authorization
+ *
+ * Successful callbacks require code and state and complete one previously authenticated project authorization. Provider rejection instead supplies error and optional error_description, error_uri and state; it returns a static actionable problem without completing authorization or reflecting provider input. Success and error parameters cannot be combined. This callback grants no general unauthenticated product access.
+ */
+export const completeCloudflareDnsAuthorization = <ThrowOnError extends boolean = true>(
+  parameters?: {
+    code?: string;
+    state?: string;
+    error?: string;
+    error_description?: string;
+    error_uri?: string;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  CompleteCloudflareDnsAuthorizationResponses,
+  CompleteCloudflareDnsAuthorizationErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "query", key: "code" },
+          { in: "query", key: "state" },
+          { in: "query", key: "error" },
+          { in: "query", key: "error_description" },
+          { in: "query", key: "error_uri" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    CompleteCloudflareDnsAuthorizationResponses,
+    CompleteCloudflareDnsAuthorizationErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    url: "/v1/cloudflare/oauth/callback",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Get the current authenticated identity
+ *
+ * Returns the stable ohmyhost actor and internal organization identifiers derived from the bearer credential.
+ */
+export const getCurrentIdentity = <ThrowOnError extends boolean = true>(
+  parameters?: {
+    "X-Request-Id"?: string;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<GetCurrentIdentityResponses, GetCurrentIdentityErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [{ args: [{ in: "headers", key: "X-Request-Id" }] }],
+  );
+  return (options?.client ?? client).get<
+    GetCurrentIdentityResponses,
+    GetCurrentIdentityErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/me",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Revoke the current signed-in user session
+ *
+ * Revokes only the session proven by the bearer credential, confirms its absence from active WorkOS sessions and records local terminal denial. No organization is required. The request body and query must be empty; caller-supplied session or user identifiers are not accepted. Repeated private processing cannot revoke another session. Once revoked, the old bearer is no longer authorized, including for a public replay. This synchronous identity-lifecycle operation does not create a project operation.
+ */
+export const revokeCurrentSession = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  RevokeCurrentSessionResponses,
+  RevokeCurrentSessionErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    RevokeCurrentSessionResponses,
+    RevokeCurrentSessionErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/session:revoke",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Create an organization for the signed-in user
+ *
+ * Creates an organization and its creator's Owner membership. Only a verified user session may call this endpoint; no existing organization is required. Repeating the same Idempotency-Key and name observes the same creation, never recreating revoked membership. Creation does not change the caller's token, because organization scope is carried by the access token; a client must obtain a token for this organization before project mutations. The CLI and MCP do that in the same call and need no second login.
+ */
+export const createOrganization = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    createOrganizationRequest: CreateOrganizationRequest;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<CreateOrganizationResponses, CreateOrganizationErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { key: "createOrganizationRequest", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    CreateOrganizationResponses,
+    CreateOrganizationErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/organizations",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Create or resume an owner's hosted Stripe Checkout
+ *
+ * Returns a human payment URL, never charges a saved card. Paid is USD 10/month; each top-up pack is USD 10 before tax; a purchase grants 100 credits per dollar up to USD 100 and 125 credits per dollar for the part above, so 10 packs grant 10000 and 20 packs grant 22500 non-expiring credits. Retry the same offer, packs and Idempotency-Key after uncertainty. Browser return is not payment proof; read this checkout and the organization balance. A conflicting or existing subscription returns billing_purchase_conflict (409); read the original checkout or request an owner billing portal URL instead of another purchase. Works at zero credits.
+ */
+export const createBillingCheckout = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    organization_id: Ulid;
+    offer: "topup" | "paid";
+    packs: number;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  CreateBillingCheckoutResponses,
+  CreateBillingCheckoutErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "organization_id" },
+          { in: "body", key: "offer" },
+          { in: "body", key: "packs" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    CreateBillingCheckoutResponses,
+    CreateBillingCheckoutErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/organizations/{organization_id}/billing/checkouts",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Observe and reconcile an owner's original checkout
+ *
+ * Reads Stripe and reconciles confirmed credits/refunds idempotently. payment_confirmed describes the original Checkout, not spendable credit or current Paid entitlement. Read organization credits for available funding; paid_until is the current paid coverage. No new purchase intent or payment is created; an uncertain original Checkout can resume using its stored identity.
+ */
+export const getBillingCheckout = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    organization_id: Ulid;
+    checkout_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<GetBillingCheckoutResponses, GetBillingCheckoutErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "organization_id" },
+          { in: "path", key: "checkout_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetBillingCheckoutResponses,
+    GetBillingCheckoutErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/organizations/{organization_id}/billing/checkouts/{checkout_id}",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Open the owner's Stripe billing portal
+ *
+ * Creates a short-lived human URL for invoices, payment method updates and cancellation at period end. Does not charge or change the subscription itself. Customer and return URL are server-selected. Request a fresh URL if the portal has expired. Works at zero credits.
+ */
+export const createBillingPortal = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    organization_id: Ulid;
+    body: {
+      [key: string]: never;
+    };
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<CreateBillingPortalResponses, CreateBillingPortalErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "organization_id" },
+          { key: "body", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    CreateBillingPortalResponses,
+    CreateBillingPortalErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/organizations/{organization_id}/billing/portal",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Read auto-recharge and the current payment handoff
+ *
+ * Owner-only. Reads saved consent and gross UTC-month spending; a pending Stripe card setup may be resumed. No charge is initiated by reading. Private Stripe URLs must not be logged.
+ */
+export const getBillingRecharge = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    organization_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<GetBillingRechargeResponses, GetBillingRechargeErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "organization_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetBillingRechargeResponses,
+    GetBillingRechargeErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/organizations/{organization_id}/billing/recharge",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Enable or disable explicitly authorized auto-recharge
+ *
+ * Owner-only. An agent must obtain explicit approval for off-session charges and the gross monthly spending cap before enabling. Each refill costs USD 9 before tax for 1000 non-expiring credits when available credits fall below 100. A saved Stripe card is required; follow setup_url if returned. Current revision prevents stale edits; retry the original Idempotency-Key and payload after uncertainty. Disable prevents new charge initiation; already initiated payments may complete. No subscription or Paid features are created.
+ */
+export const configureBillingRecharge = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    organization_id: Ulid;
+    enabled: boolean;
+    monthly_limit_minor: number;
+    consent: "off_session_v1" | null;
+    revision: number;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  ConfigureBillingRechargeResponses,
+  ConfigureBillingRechargeErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "organization_id" },
+          { in: "body", key: "enabled" },
+          { in: "body", key: "monthly_limit_minor" },
+          { in: "body", key: "consent" },
+          { in: "body", key: "revision" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).put<
+    ConfigureBillingRechargeResponses,
+    ConfigureBillingRechargeErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/organizations/{organization_id}/billing/recharge",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Read the owner's shared organization credit pool
+ *
+ * Returns posted credits and reservations, in microcredits (one credit is 1000000 microcredits). Monthly entitlement posting is idempotent. Only the organization Owner may read this balance. active_meters names the currently billed sources; unreported usage is not included. platform_overrun_micros is recorded platform exposure, not customer debt. Remains available at zero credit.
+ */
+export const getOrganizationCredits = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    organization_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  GetOrganizationCreditsResponses,
+  GetOrganizationCreditsErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "organization_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetOrganizationCreditsResponses,
+    GetOrganizationCreditsErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/organizations/{organization_id}/credits",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Read monthly measured usage by project and meter
+ *
+ * Owner-only event-month ledger totals, including signed corrections posted by as_of. Returns up to 20 projects per page in ID order; use next_cursor with the same month. Current unresolved reservations are separate from measured consumption. Null environment_id means project-shared cost, never guessed Dev allocation. Only posted measurements are included; this is not a complete provider invoice or zero-usage guarantee. Billing may arrive later. No credit is granted or charged by this read; it remains usable at zero credits.
+ */
+export const getOrganizationCreditUsage = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    organization_id: Ulid;
+    month: string;
+    cursor?: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  GetOrganizationCreditUsageResponses,
+  GetOrganizationCreditUsageErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "organization_id" },
+          { in: "query", key: "month" },
+          { in: "query", key: "cursor" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetOrganizationCreditUsageResponses,
+    GetOrganizationCreditUsageErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/organizations/{organization_id}/credit-usage",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Request an asynchronous password-encrypted SQL ZIP
+ *
+ * Owner-only and available at zero credits. Exports each confirmed physical project database once, including separate Dev/Prod SQL or one shared SQL file. Excludes files, source code and configuration. At most one accepted export per project per rolling 24 hours; failed jobs still count and idempotent replay returns the original operation. The user retains the password. Poll getProjectExport; do not create another job while it is running.
+ */
+export const createProjectExport = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    project_id: Ulid;
+    password: string;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<CreateProjectExportResponses, CreateProjectExportErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "project_id" },
+          { in: "body", key: "password" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    CreateProjectExportResponses,
+    CreateProjectExportErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/exports",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Read export progress and its verified 24-hour download capability
+ *
+ * Owner-only, including at zero credits. Poll queued/running jobs after next_poll_after_seconds. A verified SQL ZIP is retained seven days. Its signed download URL is valid 24 hours and is issued only with at least 24 hours of retention left; otherwise download fields are null. Treat the URL as a secret bearer capability. Neither the password nor any permanent storage credential can be retrieved. Generic operation reads never contain this capability.
+ */
+export const getProjectExport = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+    export_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<GetProjectExportResponses, GetProjectExportErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+          { in: "path", key: "export_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetProjectExportResponses,
+    GetProjectExportErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/exports/{export_id}",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Read a project's optional monthly credit budget
+ *
+ * Owner-only snapshot of UTC-calendar-month measured usage and all open reservations. No budget means shared organization funds; continue mode does not stop at the threshold.
+ */
+export const getProjectCreditBudget = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  GetProjectCreditBudgetResponses,
+  GetProjectCreditBudgetErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetProjectCreditBudgetResponses,
+    GetProjectCreditBudgetErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/credit-budget",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Set or clear the owner's project budget
+ *
+ * Changes only the budget policy, never credit grants or usage. amount_micros null clears the budget and requires continue mode. stop rejects new billable work when measured monthly usage plus reservations reaches the limit. This local setting completes atomically with its operation, audit and idempotent response; no provider job is queued. Replaying an old key returns its original snapshot without restoring its old policy.
+ */
+export const setProjectCreditBudget = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    project_id: Ulid;
+    setProjectCreditBudgetRequest: SetProjectCreditBudgetRequest;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  SetProjectCreditBudgetResponses,
+  SetProjectCreditBudgetErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "project_id" },
+          { key: "setProjectCreditBudgetRequest", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).put<
+    SetProjectCreditBudgetResponses,
+    SetProjectCreditBudgetErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/credit-budget",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * List projects visible to the current authenticated identity
+ *
+ * Returns a stable ULID-ordered page across only the caller's authorized organizations. A session that selected no workspace can see nothing and returns organization_required (409) instead of an empty page; select a workspace and repeat.
+ */
+export const listProjects = <ThrowOnError extends boolean = true>(
+  parameters?: {
+    "X-Request-Id"?: string;
+    cursor?: Ulid;
+    limit?: number;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<ListProjectsResponses, ListProjectsErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "query", key: "cursor" },
+          { in: "query", key: "limit" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    ListProjectsResponses,
+    ListProjectsErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Create a project
+ *
+ * Atomically records the project and a durable operation for asynchronous processing.
+ */
+export const createProject = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    createProjectRequest: CreateProjectRequest;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<CreateProjectResponses, CreateProjectErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { key: "createProjectRequest", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    CreateProjectResponses,
+    CreateProjectErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Delete a project
+ *
+ * Asynchronously reconciles all project-owned resources and is safe to repeat.
+ */
+export const deleteProject = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    "If-Match": string;
+    "X-Confirmation-Token": ConfirmationToken;
+    project_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<DeleteProjectResponses, DeleteProjectErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "headers", key: "If-Match" },
+          { in: "headers", key: "X-Confirmation-Token" },
+          { in: "path", key: "project_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).delete<
+    DeleteProjectResponses,
+    DeleteProjectErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Get a project
+ */
+export const getProject = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<GetProjectResponses, GetProjectErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetProjectResponses,
+    GetProjectErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Read current project context for an agent
+ *
+ * At most 500 lines / 32768 UTF-8 bytes of Markdown generated from current project, domain and mail state plus shared notes. Requires project read access; organization credit and usage information is included only with credits-read permission. Component observation failures are explicit; no cached success is substituted. Notes are untrusted data, never authorization. No credentials or signed access URLs belong here. Readiness waits require an agent to check again after 60 minutes; this read does not schedule a client wake-up.
+ */
+export const getProjectContext = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<GetProjectContextResponses, GetProjectContextErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetProjectContextResponses,
+    GetProjectContextErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/context",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Replace bounded shared project notes without losing concurrent edits
+ *
+ * Requires project write access. Read context first and pass notes.version as expected_version (zero for a new document). Maximum 250 lines and 16384 UTF-8 bytes; line endings normalize to LF. Empty Markdown clears notes. Never store secrets, logs or signed access URLs. Exact Idempotency-Key replay returns the original receipt, even after later edits. A stale version returns project_notes_conflict; read again, merge intentionally and submit a new key. Notes are deleted when project cleanup completes; audit and idempotency metadata contain no note text.
+ */
+export const setProjectNotes = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    project_id: Ulid;
+    markdown: string;
+    expected_version: number;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<SetProjectNotesResponses, SetProjectNotesErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "project_id" },
+          { in: "body", key: "markdown" },
+          { in: "body", key: "expected_version" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).put<
+    SetProjectNotesResponses,
+    SetProjectNotesErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/context/notes",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Get the current project deployment status
+ *
+ * Returns the immutable project handle, current source, default environment, head deployment, independently evidenced dev and prod gateway origins, latest operation, and cleanup state without exposing provider credentials.
+ */
+export const getProjectStatus = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<GetProjectStatusResponses, GetProjectStatusErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetProjectStatusResponses,
+    GetProjectStatusErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/status",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Create a single-use dev access ticket
+ *
+ * Owner-only issuance of a ten-minute single-use ticket for the immutable dev project origin. A new ticket revokes unused tickets previously issued to the same principal.
+ */
+export const createProjectDevAccessTicket = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  CreateProjectDevAccessTicketResponses,
+  CreateProjectDevAccessTicketErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    CreateProjectDevAccessTicketResponses,
+    CreateProjectDevAccessTicketErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/dev-access-tickets",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Plan project deletion
+ *
+ * Produces a non-mutating project deletion plan and a ten-minute action-bound confirmation token.
+ */
+export const planProjectDeletion = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<PlanProjectDeletionResponses, PlanProjectDeletionErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    PlanProjectDeletionResponses,
+    PlanProjectDeletionErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}:delete-plan",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Link a GitHub source repository
+ *
+ * Uses the workspace GitHub connection to admit a source-link operation without another browser authorization or a build. The caller must have current sources:link permission and the connected installation must cover the repository. If the workspace is not connected, run github connect first; if repository access is missing, update the installation through its settings URL. Repeat identical arguments and key after uncertainty.
+ */
+export const linkProjectSource = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    project_id: Ulid;
+    linkProjectSourceRequest: LinkProjectSourceRequest;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<LinkProjectSourceResponses, LinkProjectSourceErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "project_id" },
+          { key: "linkProjectSourceRequest", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    LinkProjectSourceResponses,
+    LinkProjectSourceErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/source:link",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Get the linked source status
+ */
+export const getProjectSource = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<GetProjectSourceResponses, GetProjectSourceErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetProjectSourceResponses,
+    GetProjectSourceErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/source",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Get automatic GitHub push deployment status
+ */
+export const getProjectSourceAutoDeploy = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  GetProjectSourceAutoDeployResponses,
+  GetProjectSourceAutoDeployErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetProjectSourceAutoDeployResponses,
+    GetProjectSourceAutoDeployErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/source/auto-deploy",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Configure automatic GitHub push deployment
+ *
+ * Configures exactly one Git branch whose signed pushes deploy immutable commits to dev. Production remains an explicit promotion.
+ */
+export const configureProjectSourceAutoDeploy = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    project_id: Ulid;
+    configureSourceAutoDeployRequest: ConfigureSourceAutoDeployRequest;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  ConfigureProjectSourceAutoDeployResponses,
+  ConfigureProjectSourceAutoDeployErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "project_id" },
+          { key: "configureSourceAutoDeployRequest", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).put<
+    ConfigureProjectSourceAutoDeployResponses,
+    ConfigureProjectSourceAutoDeployErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/source/auto-deploy",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Start project-scoped Cloudflare DNS authorization
+ *
+ * Creates or replays one short-lived authorization URL for the customer Cloudflare zone bound to the project's Paid domain. Pending requests replay the original handoff. Expired or consumed requests return cloudflare_authorization_closed (409); read current DNS authorization status and reuse a valid matching grant, or request a fresh authorization with a new key. No provider credential is returned.
+ */
+export const createCloudflareDnsAuthorization = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    project_id: Ulid;
+    createCloudflareDnsAuthorizationRequest: CreateCloudflareDnsAuthorizationRequest;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  CreateCloudflareDnsAuthorizationResponses,
+  CreateCloudflareDnsAuthorizationErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "project_id" },
+          { key: "createCloudflareDnsAuthorizationRequest", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    CreateCloudflareDnsAuthorizationResponses,
+    CreateCloudflareDnsAuthorizationErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/cloudflare-dns/authorization",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Get project-scoped Cloudflare DNS authorization status
+ *
+ * Returns only the fixed zone, closed scope set, expiry, and authorization state; provider credentials are never exposed.
+ */
+export const getCloudflareDnsAuthorizationStatus = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  GetCloudflareDnsAuthorizationStatusResponses,
+  GetCloudflareDnsAuthorizationStatusErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetCloudflareDnsAuthorizationStatusResponses,
+    GetCloudflareDnsAuthorizationStatusErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/cloudflare-dns",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Apply the server-derived project domains
+ *
+ * Starts an idempotent durable operation for the exact project-derived development, production, and mail hostnames. The request has no body.
+ */
+export const configureProjectDomains = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    project_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  ConfigureProjectDomainsResponses,
+  ConfigureProjectDomainsErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "project_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).put<
+    ConfigureProjectDomainsResponses,
+    ConfigureProjectDomainsErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/domains",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Plan one Paid customer-owned hostname
+ */
+export const planPaidProjectDomain = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+    paidDomainRequest: PaidDomainRequest;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  PlanPaidProjectDomainResponses,
+  PlanPaidProjectDomainErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+          { key: "paidDomainRequest", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    PlanPaidProjectDomainResponses,
+    PlanPaidProjectDomainErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/paid-domain:plan",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Delete one exact Paid customer-owned hostname
+ */
+export const deletePaidProjectDomain = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    project_id: Ulid;
+    paidDomainRequest: PaidDomainRequest;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  DeletePaidProjectDomainResponses,
+  DeletePaidProjectDomainErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "project_id" },
+          { key: "paidDomainRequest", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).delete<
+    DeletePaidProjectDomainResponses,
+    DeletePaidProjectDomainErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/paid-domain",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Read the Paid customer-owned hostname
+ */
+export const getPaidProjectDomain = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  GetPaidProjectDomainResponses,
+  GetPaidProjectDomainErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetPaidProjectDomainResponses,
+    GetPaidProjectDomainErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/paid-domain",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Apply one Paid customer-owned hostname
+ *
+ * Requires a confirmed current Paid service period and no expired credit-exhaustion grace. Returns paid_plan_required without a Paid period, or insufficient_organization_credits after seven days with no available credits, without provider mutation. Top-ups restore exhausted Paid access but do not create or extend a Paid service period.
+ */
+export const applyPaidProjectDomain = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    project_id: Ulid;
+    paidDomainRequest: PaidDomainRequest;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  ApplyPaidProjectDomainResponses,
+  ApplyPaidProjectDomainErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "project_id" },
+          { key: "paidDomainRequest", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).put<
+    ApplyPaidProjectDomainResponses,
+    ApplyPaidProjectDomainErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/paid-domain",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Get sender-domain delegation status
+ */
+export const getProjectMailDomain = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  GetProjectMailDomainResponses,
+  GetProjectMailDomainErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetProjectMailDomainResponses,
+    GetProjectMailDomainErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/mail-domain",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Configure the project sender subdomain
+ *
+ * Create-only admission for one canonical sender subdomain, requiring a confirmed current Paid service period. Top-ups and promotional credits do not enable Paid. Provider mutation occurs only inside a later authorized deployment Workflow.
+ */
+export const configureProjectMailDomain = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    project_id: Ulid;
+    configureProjectMailDomainRequest: ConfigureProjectMailDomainRequest;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  ConfigureProjectMailDomainResponses,
+  ConfigureProjectMailDomainErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "project_id" },
+          { key: "configureProjectMailDomainRequest", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).put<
+    ConfigureProjectMailDomainResponses,
+    ConfigureProjectMailDomainErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/mail-domain",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Plan a deployment
+ *
+ * Resolves immutable inputs and estimates effects without provider mutation or billable work. Mail and the currently supported mail-backed Better Auth contract require a confirmed Paid service period; it is checked again before build reservation. An old sender configuration is not Paid authority.
+ */
+export const planDeployment = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+    planDeploymentRequest: PlanDeploymentRequest;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<PlanDeploymentResponses, PlanDeploymentErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+          { key: "planDeploymentRequest", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    PlanDeploymentResponses,
+    PlanDeploymentErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/deployments:plan",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * List deployments
+ */
+export const listDeployments = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+    cursor?: string;
+    limit?: number;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<ListDeploymentsResponses, ListDeploymentsErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+          { in: "query", key: "cursor" },
+          { in: "query", key: "limit" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    ListDeploymentsResponses,
+    ListDeploymentsErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/deployments",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Create a deployment
+ *
+ * Reserves the quoted build credits from the shared organization pool and starts the exact reviewed plan as one durable operation. Insufficient available credits or an explicit project stop budget rejects before operation creation or provider work. Repeating the accepted request never reserves twice.
+ */
+export const createDeployment = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    project_id: Ulid;
+    createDeploymentRequest: CreateDeploymentRequest;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<CreateDeploymentResponses, CreateDeploymentErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "project_id" },
+          { key: "createDeploymentRequest", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    CreateDeploymentResponses,
+    CreateDeploymentErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/deployments",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Get deployment status
+ */
+export const getDeployment = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+    deployment_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<GetDeploymentResponses, GetDeploymentErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+          { in: "path", key: "deployment_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetDeploymentResponses,
+    GetDeploymentErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/deployments/{deployment_id}",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * List normalized deployment diagnostics
+ */
+export const getDeploymentLogs = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+    deployment_id: Ulid;
+    cursor?: string;
+    limit?: number;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<GetDeploymentLogsResponses, GetDeploymentLogsErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+          { in: "path", key: "deployment_id" },
+          { in: "query", key: "cursor" },
+          { in: "query", key: "limit" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetDeploymentLogsResponses,
+    GetDeploymentLogsErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/deployments/{deployment_id}/logs",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Stream normalized deployment diagnostics
+ */
+export const streamDeploymentLogs = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+    deployment_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError, StreamDeploymentLogsResponse>,
+): Promise<ServerSentEventsResult<StreamDeploymentLogsResponses>> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+          { in: "path", key: "deployment_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).sse.get<
+    StreamDeploymentLogsResponses,
+    StreamDeploymentLogsErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/deployments/{deployment_id}/logs/events",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Read actual managed database compute configuration
+ *
+ * Project readers can observe current Dev or Prod compute without receiving provider IDs or credentials and without executing SQL or waking the database. Explicitly shared data resolves to the same physical database for both environments. A null database means the owned environment has no confirmed managed placement. Provider failures return a problem, never invented defaults. Configuration describes observed settings, not a completed resize operation. suspend_timeout_seconds is the configured provider value; 0 means provider default and -1 means never suspend.
+ */
+export const getDatabaseCompute = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+    environment?: "dev" | "prod";
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<GetDatabaseComputeResponses, GetDatabaseComputeErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+          { in: "query", key: "environment" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetDatabaseComputeResponses,
+    GetDatabaseComputeErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/compute",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Select standard or Paid performance database compute
+ *
+ * Requires project-write access and explicit confirmation. Reads the organization plan at acceptance (Free 0.25 CU/1 GB/60 idle seconds or Paid 0.5 CU/2 GB/60 idle seconds). Changes the existing database in place without copying or resetting data. Shared Dev/Prod data changes both environments. A brief connection interruption is possible. Poll the returned operation every 60 seconds; do not submit a second change while it runs. Completion requires actual provider settings and settled operations. Actual CU consumption remains metered. Performance requires effective Paid access and an active rate; it selects fixed 1 CU/4 GB/300 idle seconds at 2.5 times Paid-standard database compute credits per equal active minute. Only database compute changes price. Raw CU-second measurements are preserved; mixed or uncertain transition hours waive the premium. Returning to standard restores the effective plan size.
+ */
+export const changeDatabaseCompute = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    project_id: Ulid;
+    environment: "dev" | "prod";
+    profile: "standard" | "performance";
+    confirm: true;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  ChangeDatabaseComputeResponses,
+  ChangeDatabaseComputeErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "project_id" },
+          { in: "body", key: "environment" },
+          { in: "body", key: "profile" },
+          { in: "body", key: "confirm" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    ChangeDatabaseComputeResponses,
+    ChangeDatabaseComputeErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/compute",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Execute one bounded database write in Dev or Prod
+ *
+ * Owner-authorized INSERT, UPDATE or DELETE through the restricted runtime role, including ordinary upsert. Environment is mandatory. One direct statement and transaction, five-second timeout and at most 1000 directly affected rows; customer triggers and cascades may affect more rows. Rows are not returned. The durable Idempotency-Key receipt persists until project deletion. Same-key retries observe the original execution attempt; unknown outcomes never automatically execute again. Inspect target data before deliberately choosing a new key. Schema changes use GitHub migrations. Database compute is metered normally and existing credit grace and Stop budgets apply. Application row-level security policies remain effective for writes.
+ */
+export const writeProjectDatabase = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    project_id: Ulid;
+    projectDatabaseWriteRequest: ProjectDatabaseWriteRequest;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  WriteProjectDatabaseResponses,
+  WriteProjectDatabaseErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "project_id" },
+          { key: "projectDatabaseWriteRequest", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    WriteProjectDatabaseResponses,
+    WriteProjectDatabaseErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/write",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Run one bounded read-only Dev or Prod database query
+ *
+ * Executes one SELECT through the project's least-privilege read-only role. Application row-level security policies apply and may filter rows; a complete SQL archive uses the separate authorized export workflow. Connection credentials are never returned.
+ */
+export const queryProjectDatabase = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+    projectDatabaseQueryRequest: ProjectDatabaseQueryRequest;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  QueryProjectDatabaseResponses,
+  QueryProjectDatabaseErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+          { key: "projectDatabaseQueryRequest", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    QueryProjectDatabaseResponses,
+    QueryProjectDatabaseErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/query",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * List the project's issued database credentials
+ *
+ * Returns at most the 50 newest credentials with their derived state (active, expired or revoked). Connection URIs and passwords are never returned again; only the credential metadata is readable.
+ */
+export const listProjectDatabaseAccess = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+    environment?: "dev" | "prod";
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  ListProjectDatabaseAccessResponses,
+  ListProjectDatabaseAccessErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+          { in: "query", key: "environment" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    ListProjectDatabaseAccessResponses,
+    ListProjectDatabaseAccessErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/access",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Issue one time-bound PostgreSQL credential for Dev or Prod
+ *
+ * Owner-authorized direct PostgreSQL login for the project's own database, returned exactly once and never retrievable again. Mode read joins the read-only role, mode write joins the same restricted runtime role the application uses; neither can change schema, and application row-level security policies remain effective. The lifetime is 5 minutes to 24 hours (3600 seconds by default) and PostgreSQL refuses new logins after it; the platform ends remaining sessions within 15 minutes after expiry, at the latest. At most three active credentials exist per project environment. Database compute wakes and is metered normally, and existing credit grace and Stop budgets apply. Revoke the credential as soon as the work is finished and never store the connection URI in files, notes or source.
+ */
+export const createProjectDatabaseAccess = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+    projectDatabaseAccessRequest: ProjectDatabaseAccessRequest;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  CreateProjectDatabaseAccessResponses,
+  CreateProjectDatabaseAccessErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+          { key: "projectDatabaseAccessRequest", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    CreateProjectDatabaseAccessResponses,
+    CreateProjectDatabaseAccessErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/access",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Revoke one issued database credential
+ *
+ * Ends the credential's open sessions and removes its PostgreSQL role. Revocation is idempotent for an already revoked credential and never affects the application's own roles or any data.
+ */
+export const revokeProjectDatabaseAccess = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+    access_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  RevokeProjectDatabaseAccessResponses,
+  RevokeProjectDatabaseAccessErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+          { in: "path", key: "access_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).delete<
+    RevokeProjectDatabaseAccessResponses,
+    RevokeProjectDatabaseAccessErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/database/access/{access_id}",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Plan a deployment rollback
+ *
+ * Produces a non-mutating rollback plan for an immutable deployment artifact.
+ */
+export const planDeploymentRollback = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+    target_deployment_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  PlanDeploymentRollbackResponses,
+  PlanDeploymentRollbackErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+          { in: "path", key: "target_deployment_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    PlanDeploymentRollbackResponses,
+    PlanDeploymentRollbackErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/deployments/{target_deployment_id}:rollback-plan",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Roll back to an immutable deployment
+ *
+ * Republishes the target deployment artifact without starting a new build.
+ */
+export const rollbackDeployment = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    "If-Match": string;
+    "X-Confirmation-Token": ConfirmationToken;
+    project_id: Ulid;
+    target_deployment_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<RollbackDeploymentResponses, RollbackDeploymentErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "headers", key: "If-Match" },
+          { in: "headers", key: "X-Confirmation-Token" },
+          { in: "path", key: "project_id" },
+          { in: "path", key: "target_deployment_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    RollbackDeploymentResponses,
+    RollbackDeploymentErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/deployments/{target_deployment_id}:rollback",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Plan promotion of the current dev deployment
+ *
+ * Produces a non-mutating, ten-minute plan that binds the current succeeded dev deployment and current prod head without rebuilding the artifact.
+ */
+export const planDeploymentPromotion = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+    source_deployment_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  PlanDeploymentPromotionResponses,
+  PlanDeploymentPromotionErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+          { in: "path", key: "source_deployment_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    PlanDeploymentPromotionResponses,
+    PlanDeploymentPromotionErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/deployments/{source_deployment_id}:promote-plan",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Promote a verified dev artifact to prod
+ *
+ * Activates the immutable artifact from the current succeeded dev deployment in prod without rebuilding it.
+ */
+export const promoteDeployment = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    "If-Match": string;
+    "X-Confirmation-Token": ConfirmationToken;
+    project_id: Ulid;
+    source_deployment_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<PromoteDeploymentResponses, PromoteDeploymentErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "headers", key: "If-Match" },
+          { in: "headers", key: "X-Confirmation-Token" },
+          { in: "path", key: "project_id" },
+          { in: "path", key: "source_deployment_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    PromoteDeploymentResponses,
+    PromoteDeploymentErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/deployments/{source_deployment_id}:promote",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * List environment secret metadata
+ *
+ * Returns names and revisions only. Secret values are never readable through the public API.
+ */
+export const listEnvironmentSecrets = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+    environment_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  ListEnvironmentSecretsResponses,
+  ListEnvironmentSecretsErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+          { in: "path", key: "environment_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    ListEnvironmentSecretsResponses,
+    ListEnvironmentSecretsErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/environments/{environment_id}/secrets",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * List the newest scheduled function runs of an environment
+ *
+ * Every declared cron produces one run per due UTC minute; the newest runs come first. A run reports its state, attempt, the status the scheduled handler returned and its timing. Values never include request or response bodies.
+ */
+export const listFunctionRuns = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    project_id: Ulid;
+    environment_id: Ulid;
+    limit?: number;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<ListFunctionRunsResponses, ListFunctionRunsErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "project_id" },
+          { in: "path", key: "environment_id" },
+          { in: "query", key: "limit" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    ListFunctionRunsResponses,
+    ListFunctionRunsErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/environments/{environment_id}/function-runs",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Delete an environment secret
+ */
+export const deleteEnvironmentSecret = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    project_id: Ulid;
+    environment_id: Ulid;
+    secret_name: string;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  DeleteEnvironmentSecretResponses,
+  DeleteEnvironmentSecretErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "project_id" },
+          { in: "path", key: "environment_id" },
+          { in: "path", key: "secret_name" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).delete<
+    DeleteEnvironmentSecretResponses,
+    DeleteEnvironmentSecretErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/environments/{environment_id}/secrets/{secret_name}",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Create or rotate an environment secret
+ *
+ * Accepts a write-only value and returns metadata only. Replays require the same canonical value digest.
+ */
+export const putEnvironmentSecret = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    project_id: Ulid;
+    environment_id: Ulid;
+    secret_name: string;
+    putEnvironmentSecretRequest: PutEnvironmentSecretRequest;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<
+  PutEnvironmentSecretResponses,
+  PutEnvironmentSecretErrors,
+  ThrowOnError,
+  "data"
+> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "project_id" },
+          { in: "path", key: "environment_id" },
+          { in: "path", key: "secret_name" },
+          { key: "putEnvironmentSecretRequest", map: "body" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).put<
+    PutEnvironmentSecretResponses,
+    PutEnvironmentSecretErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/projects/{project_id}/environments/{environment_id}/secrets/{secret_name}",
+    ...options,
+    ...params,
+    headers: {
+      "Content-Type": "application/json",
+      ...options?.headers,
+      ...params.headers,
+    },
+  });
+};
+
+/**
+ * Get an operation
+ */
+export const getOperation = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    operation_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<GetOperationResponses, GetOperationErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "operation_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    GetOperationResponses,
+    GetOperationErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/operations/{operation_id}",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Reconcile an uncertain platform delivery or provider mutation
+ *
+ * Owner-only, idempotent recovery for an operation retained after an uncertain platform delivery or provider mutation. The control plane derives the exact recovery decision, including any deterministic internal Workflow handoff; the request has no body. Exhausted lifecycle recovery returns reconciliation_exhausted (409, retryable false); stop retries and report the original operation through feedback.
+ */
+export const reconcileOperation = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    "Idempotency-Key": string;
+    operation_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<ReconcileOperationResponses, ReconcileOperationErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "headers", key: "Idempotency-Key" },
+          { in: "path", key: "operation_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).post<
+    ReconcileOperationResponses,
+    ReconcileOperationErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/operations/{operation_id}:reconcile",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * Stream operation events
+ */
+export const streamOperationEvents = <ThrowOnError extends boolean = true>(
+  parameters: {
+    "X-Request-Id"?: string;
+    operation_id: Ulid;
+  },
+  options?: Options<never, ThrowOnError, StreamOperationEventsResponse>,
+): Promise<ServerSentEventsResult<StreamOperationEventsResponses>> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "path", key: "operation_id" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).sse.get<
+    StreamOperationEventsResponses,
+    StreamOperationEventsErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/operations/{operation_id}/events",
+    ...options,
+    ...params,
+  });
+};
+
+/**
+ * List audit events
+ *
+ * Returns events visible to the authenticated organization in stable descending order.
+ */
+export const listAuditEvents = <ThrowOnError extends boolean = true>(
+  parameters?: {
+    "X-Request-Id"?: string;
+    project_id?: Ulid;
+    operation_id?: Ulid;
+    cursor?: string;
+    limit?: number;
+  },
+  options?: Options<never, ThrowOnError>,
+): RequestResult<ListAuditEventsResponses, ListAuditEventsErrors, ThrowOnError, "data"> => {
+  const params = buildClientParams(
+    [parameters],
+    [
+      {
+        args: [
+          { in: "headers", key: "X-Request-Id" },
+          { in: "query", key: "project_id" },
+          { in: "query", key: "operation_id" },
+          { in: "query", key: "cursor" },
+          { in: "query", key: "limit" },
+        ],
+      },
+    ],
+  );
+  return (options?.client ?? client).get<
+    ListAuditEventsResponses,
+    ListAuditEventsErrors,
+    ThrowOnError,
+    "data"
+  >({
+    responseStyle: "data",
+    security: [{ scheme: "bearer", type: "http" }],
+    url: "/v1/audit-events",
+    ...options,
+    ...params,
+  });
+};