@empiricalrun/playwright-utils 0.61.0 → 0.61.2

package/dist/generated/api-worker-openapi.d.ts

@@ -962,6 +962,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/slack/admin/scope-refresh": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * 🛡️ Complete a Slack scope refresh
+         * @description Exchanges the OAuth code from re-authorizing the Slack app on Empirical's own workspace, which applies newly requested scopes. The token is not stored. Super-admin only.
+         */
+        post: operations["refreshSlackAppScopes"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/slack/auth-test": {
         parameters: {
             query?: never;
@@ -997,7 +1017,7 @@ export interface paths {
         put?: never;
         /**
          * 🛡️ Create or update a Slack install
-         * @description Creates a Slack app install for the org and team, or updates the existing one.
+         * @description Creates a Slack app install for the org and team, or updates the existing one. A signed-in user sends the OAuth code and api-worker exchanges it; installs into Empirical's own workspace are not stored.
          */
         post: operations["upsertSlackInstallation"];
         delete?: never;
@@ -1973,8 +1993,8 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * 🛡️ Get the org's usage and cost for a month
-         * @description Org-wide usage across all of the scoped project's org projects, against the plan in effect: per-meter usage, overage so far, a month-end projection, and the usage limit.
+         * 🛡️ Get the org's usage and cost for a usage period
+         * @description Org-wide usage across all of the scoped project's org projects, against the plan in effect: per-meter usage, overage so far, a period-end projection, and the usage limit. The period is a UTC calendar month, or the billing cycle for an org on a live Dodo subscription.
          */
         get: operations["getBillingMonthSummary"];
         put?: never;
@@ -1985,6 +2005,126 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/billing/periods": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * 🛡️ List the org's usage periods
+         * @description The org's usage periods up to the current one, latest first: billing cycles back to the subscription start for an org on a live Dodo subscription, calendar months otherwise and before that.
+         */
+        get: operations["listBillingPeriods"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/billing/subscription/{subscription_id}/reconcile": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * 🛡️ 🧪 Compare a subscription's usage with Dodo's events
+         * @description Compares our usage rows with the usage events Dodo has for the subscription's customer in one billing cycle, matched by event id: per-meter totals, plus events missing from Dodo, Dodo events with no usage row, and events whose quantity changed. Read-only; sends nothing. Defaults to the current cycle; a past cycle is named by its end (its renewal date) and starts a month earlier unless cycle_start is given.
+         */
+        get: operations["reconcileSubscriptionUsage"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/billing/subscription/checkout": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * 🛡️ 🧪 Start a Dodo checkout for the org's plan
+         * @description Creates a Dodo hosted checkout that subscribes the scoped project's org to the current Dodo plan (the newest active shared plan with a Dodo product). For orgs without a plan that are not billed in INR. The plan takes effect when Dodo confirms the subscription by webhook.
+         */
+        post: operations["createSubscriptionCheckout"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/billing/subscription/end": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * 🛡️ 🧪 End the org's plan now
+         * @description Ends the scoped project's org's Dodo subscription now, with no undo: sends Dodo the usage it is missing, then cancels the subscription, or pauses it when the cycle has usage beyond the plan's allowance (Dodo charges it on pausing; a cron cancels the subscription once that charge succeeds). The plan ends at once, and the org can subscribe again. Emails the org's members and billing contacts. For an active or past-due subscription; an on-hold one must pay first.
+         */
+        post: operations["endSubscription"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/billing/subscription/offer": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * 🛡️ 🧪 Get the plan the org can subscribe to
+         * @description Whether the scoped project's org can start a Dodo checkout now (same rules as the checkout endpoint), and the plan's terms if so. The billing page uses it to show its Continue to payment button.
+         */
+        get: operations["getSubscriptionOffer"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/billing/subscription/portal": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * 🛡️ 🧪 Open the org's Dodo billing portal
+         * @description Creates a Dodo customer portal session for the scoped project's org, where the customer updates their card and downloads Dodo's invoices. A new session per call; nothing is stored. For orgs that have subscribed through Dodo.
+         */
+        post: operations["createSubscriptionPortalSession"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/billing/usage-limit": {
         parameters: {
             query?: never;
@@ -2538,7 +2678,7 @@ export interface paths {
         put?: never;
         /**
          * Dodo Payments webhook
-         * @description Receives Dodo Payments events directly from Dodo (verified by the Standard Webhooks signature). payment.succeeded events carrying an invoice_id in metadata mirror the payment onto the invoice; everything else is acked and ignored.
+         * @description Receives signature-verified Dodo events. subscription.* events re-fetch the subscription from Dodo and mirror it, with the org's plan assignment. Other events are acknowledged and ignored.
          */
         post: operations["dodoPaymentsWebhook"];
         delete?: never;
@@ -2842,7 +2982,7 @@ export interface paths {
         put?: never;
         /**
          * ⚙️ Upsert a main App installation
-         * @description Records or updates a main App installation for an org.
+         * @description Records or updates a main App installation for an org the caller can access.
          */
         post: operations["upsertMainInstallation"];
         delete?: never;
@@ -3026,7 +3166,7 @@ export interface paths {
         put?: never;
         /**
          * ⚙️ Create a reporter installation
-         * @description Records a reporter App installation for an org.
+         * @description Records a reporter App installation for an org the caller can access.
          */
         post: operations["createReporterInstallation"];
         delete?: never;
@@ -3374,7 +3514,7 @@ export interface paths {
         put?: never;
         /**
          * 🛡️ Create an invoice
-         * @description Creates a new invoice for an existing organisation.
+         * @description Creates a new invoice for an existing organisation. Refused for an org with a live Dodo subscription, which Dodo bills instead.
          */
         post: operations["createInvoice"];
         delete?: never;
@@ -3402,7 +3542,7 @@ export interface paths {
         head?: never;
         /**
          * 🛡️ Update an invoice
-         * @description Updates fields on an existing invoice.
+         * @description Updates fields on an existing invoice. Moving it to an org with a live Dodo subscription is refused.
          */
         patch: operations["updateInvoice"];
         trace?: never;
@@ -3542,7 +3682,7 @@ export interface paths {
         put?: never;
         /**
          * 🛡️ Send an invoice
-         * @description Emails the invoice PDF to the organisation's billing contacts and marks it as sent (unless `is_test_email` is set). On a real send, an unpaid INR invoice without a payment link gets a Razorpay-hosted payment link, stored on the invoice and included in the email.
+         * @description Emails the invoice PDF to the organisation's billing contacts and marks it as sent (unless `is_test_email` is set). On a real send, an unpaid INR invoice without a payment link gets a Razorpay-hosted payment link, stored on the invoice and included in the email. Refused for an org with a live Dodo subscription, which Dodo bills instead.
          */
         post: operations["sendInvoice"];
         delete?: never;
@@ -3571,26 +3711,6 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/invoices/org/{id}/checkout-session": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
-        /**
-         * 🛡️ Create a checkout session to pay an invoice
-         * @description Creates a single-use Dodo Payments checkout session for the outstanding amount of one of the scoped project's org's sent invoices. Sessions are not stored; a new one is created per attempt. Payment confirmation arrives via the Dodo webhook, not this endpoint.
-         */
-        post: operations["createInvoiceCheckoutSession"];
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
     "/api/invoices/org/{id}/pdf/download": {
         parameters: {
             query?: never;
@@ -3651,7 +3771,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/invoices/org/{id}/tax-invoice/download": {
+    "/api/invoices/reminders/upcoming": {
         parameters: {
             query?: never;
             header?: never;
@@ -3659,10 +3779,10 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * 🛡️ Download the tax invoice for a paid invoice
-         * @description Streams the payment processor's (Dodo, the merchant of record) tax invoice PDF for the invoice's most recent settling payment.
+         * 🛡️ List upcoming invoice reminders
+         * @description Returns read-only invoice reminder candidates for the next window. This endpoint does not send emails or stamp reminder timestamps.
          */
-        get: operations["downloadOrgInvoiceTaxInvoice"];
+        get: operations["listUpcomingInvoiceReminders"];
         put?: never;
         post?: never;
         delete?: never;
@@ -3671,20 +3791,20 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/invoices/reminders/upcoming": {
+    "/api/jira/events": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
+        get?: never;
+        put?: never;
         /**
-         * 🛡️ List upcoming invoice reminders
-         * @description Returns read-only invoice reminder candidates for the next window. This endpoint does not send emails or stamp reminder timestamps.
+         * Receive a Jira webhook
+         * @description Receives a Jira webhook delivery, resolves the install and project, and ingests issues carrying the `empirical` label as Empirical requests.
          */
-        get: operations["listUpcomingInvoiceReminders"];
-        put?: never;
-        post?: never;
+        post: operations["receiveJiraWebhook"];
         delete?: never;
         options?: never;
         head?: never;
@@ -3706,7 +3826,7 @@ export interface paths {
         put?: never;
         /**
          * ⚙️ Create or reauthorize a Jira installation
-         * @description Stores a Jira app installation, or reauthorizes the existing site while preserving mappings, and optionally registers its webhook.
+         * @description Stores a Jira app installation, or reauthorizes the existing site while preserving mappings, and optionally registers its webhook. A signed-in user sends the OAuth code and api-worker exchanges it.
          */
         post: operations["createJiraInstallation"];
         delete?: never;
@@ -3815,6 +3935,26 @@ export interface paths {
         patch: operations["updateJiraWebhookExpiresAt"];
         trace?: never;
     };
+    "/api/linear/events": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Receive a Linear webhook
+         * @description Receives a Linear webhook delivery, verified by its `linear-signature` header, and ingests labelled issues into the resolved project as Empirical requests.
+         */
+        post: operations["receiveLinearWebhook"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/linear/installations": {
         parameters: {
             query?: never;
@@ -3830,7 +3970,7 @@ export interface paths {
         put?: never;
         /**
          * ⚙️ Create a Linear installation
-         * @description Creates or reauthorizes a Linear installation and stores its OAuth tokens.
+         * @description Creates or reauthorizes a Linear installation and stores its OAuth tokens. A signed-in user sends the OAuth code and api-worker exchanges it.
          */
         post: operations["createLinearInstallation"];
         delete?: never;
@@ -4051,6 +4191,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/oauth/authorize-url": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * ⚙️ Get an OAuth authorize URL
+         * @description Builds the provider authorize URL (client ID and scopes) for connecting Slack, Linear, Jira or the GitHub reporter app. The caller keeps the state and redirects to the URL.
+         */
+        get: operations["getOAuthAuthorizeUrl"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/onboarding/complete": {
         parameters: {
             query?: never;
@@ -4334,7 +4494,7 @@ export interface paths {
         put?: never;
         /**
          * ⚙️ Resolve org membership for a signed-in user
-         * @description Grants super-admin to staff emails; for users with no org yet, accepts pending invites for the email and matches org email domains. Returns the user's memberships and super-admin flag. System-to-system callers only.
+         * @description Grants super-admin to staff emails; for users with no org yet, accepts pending invites for the email and matches org email domains. Returns the user's memberships and super-admin flag. A signed-in user resolves their own membership and needs a confirmed email; system callers name the user in the body.
          */
         post: operations["resolveMembership"];
         delete?: never;
@@ -4400,7 +4560,7 @@ export interface paths {
         };
         /**
          * 🛡️ Get the org's plan
-         * @description Returns whether the scoped project's org is on a plan (now, or during `month`), and the plan's terms when it is a shared plan.
+         * @description Returns whether the scoped project's org is on a plan (now, or during `month` or `period`), and the plan's terms when it is a shared plan.
          */
         get: operations["getOrgPlan"];
         put?: never;
@@ -5155,31 +5315,27 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/runner-backends": {
+    "/api/runner-backends/claim": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /**
-         * 🛡️ 🧪 List runner backends
-         * @description Lists customer-hosted runner backends, optionally for one org.
-         */
-        get: operations["listRunnerBackends"];
+        get?: never;
         put?: never;
         /**
-         * 🛡️ 🧪 Register a runner backend
-         * @description Registers an installation as `pending` and returns the external ID its role must require. Run `verify` before linking projects.
+         * 🧪 Call home from an installation's stack
+         * @description Called by the registration Lambda in a Private Runner stack. On Create and Update it records the stack's resources and versions and verifies them; a pending backend that passes becomes active. Delete always succeeds: it releases an unverified claim so the link can be reused, or disables an active backend and moves its projects back to Empirical-hosted runs.
          */
-        post: operations["createRunnerBackend"];
+        post: operations["claimRunnerBackend"];
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/runner-backends/{id}": {
+    "/api/runner-backends/project": {
         parameters: {
             query?: never;
             header?: never;
@@ -5187,19 +5343,63 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * 🛡️ 🧪 Get a runner backend
-         * @description Returns one runner backend.
+         * 🧪 Get the scoped project's runner backend
+         * @description Returns the runner backend the scoped project is linked to, including its verification status, or null when the project runs on Empirical-hosted infrastructure.
          */
-        get: operations["getRunnerBackend"];
+        get: operations["getProjectRunnerBackend"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/runner-backends/project/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
         put?: never;
         post?: never;
+        /**
+         * 🧪 Remove a private runner
+         * @description Deletes an unfinished setup or a disconnected runner of the scoped project's organisation that no project uses. Its CloudFormation stack, if one exists, stays in the AWS account until deleted there.
+         */
+        delete: operations["removeProjectRunnerBackend"];
+        options?: never;
+        head?: never;
+        /**
+         * 🧪 Rename a private runner
+         * @description Renames a runner backend of the scoped project's organisation.
+         */
+        patch: operations["renameProjectRunnerBackend"];
+        trace?: never;
+    };
+    "/api/runner-backends/project/{id}/disconnect": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * 🧪 Disconnect a private runner
+         * @description Stops sending runs to a runner backend of the scoped project's organisation and moves every project on it back to Empirical-hosted runs. The stack stays in the AWS account; delete it there to remove it. Re-enable restores the runner, but not the projects' links.
+         */
+        post: operations["disconnectProjectRunnerBackend"];
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/runner-backends/{id}/disable": {
+    "/api/runner-backends/project/{id}/enable": {
         parameters: {
             query?: never;
             header?: never;
@@ -5209,17 +5409,17 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * 🛡️ 🧪 Disable a runner backend
-         * @description Stops new dispatches to the backend immediately: runs of linked projects fail with `dispatch_failed` until it is verified again or the projects are unlinked.
+         * 🧪 Re-enable a disconnected private runner
+         * @description Verifies a disabled runner backend of the scoped project's organisation and makes it active again if every check passes. Projects are not re-linked.
          */
-        post: operations["disableRunnerBackend"];
+        post: operations["enableProjectRunnerBackend"];
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/runner-backends/{id}/verify": {
+    "/api/runner-backends/project/{id}/registration": {
         parameters: {
             query?: never;
             header?: never;
@@ -5229,17 +5429,17 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * 🛡️ 🧪 Verify a runner backend
-         * @description Assumes the backend's role and makes one read-only call to each queue, the cluster and the log group. On success the backend becomes `active`; on failure its status is unchanged. A disabled backend is re-enabled only by a passing verify.
+         * 🧪 Create a new setup link
+         * @description Mints a new quick-create link for a pending runner backend of the scoped project's organisation, replacing any earlier unused link.
          */
-        post: operations["verifyRunnerBackend"];
+        post: operations["createProjectRunnerBackendRegistration"];
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/runner-backends/project": {
+    "/api/runner-backends/project/available": {
         parameters: {
             query?: never;
             header?: never;
@@ -5247,10 +5447,10 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * ⚙️ 🧪 Get the scoped project's runner backend
-         * @description Returns the runner backend the scoped project is linked to, including its verification status, or null when the project runs on Empirical-hosted infrastructure.
+         * 🧪 List the organisation's runner backends
+         * @description Every runner backend of the scoped project's organisation, in any status, so a project can use one another project set up or resume a setup in progress.
          */
-        get: operations["getProjectRunnerBackend"];
+        get: operations["listProjectOrgRunnerBackends"];
         put?: never;
         post?: never;
         delete?: never;
@@ -5259,7 +5459,27 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/api/runner-backends/project/verify": {
+    "/api/runner-backends/project/runner-backend": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        /**
+         * 🧪 Choose where the project's runs execute
+         * @description Sends the scoped project's new runs to an active runner backend of its organisation, or back to Empirical-hosted infrastructure with null. Runs already created keep their placement.
+         */
+        put: operations["setScopedProjectRunnerBackend"];
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/runner-backends/project/setup": {
         parameters: {
             query?: never;
             header?: never;
@@ -5269,17 +5489,17 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * ⚙️ 🧪 Re-check the scoped project's runner backend
-         * @description Runs the same read-only checks as `verify` against the backend the scoped project is linked to and records the result, so a customer can confirm a fix to their role or stack. It never changes the backend's status: a disabled backend is re-enabled only by Empirical.
+         * 🧪 Start setting up a private runner
+         * @description Registers a pending runner backend for the scoped project's organisation in the given AWS account and region, or reuses one whose stack hasn't called home yet or was deleted, and returns a quick-create link for it. The stack activates the backend when it is created.
          */
-        post: operations["verifyProjectRunnerBackend"];
+        post: operations["setupProjectRunnerBackend"];
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/api/runner-backends/projects/{project_id}": {
+    "/api/runner-backends/project/verify": {
         parameters: {
             query?: never;
             header?: never;
@@ -5287,12 +5507,12 @@ export interface paths {
             cookie?: never;
         };
         get?: never;
+        put?: never;
         /**
-         * 🛡️ 🧪 Set a project's runner backend
-         * @description Links a project to an active backend of its organisation, or back to Empirical-hosted with null. Applies to runs created afterwards; runs already created keep their backend.
+         * 🧪 Re-check the scoped project's runner backend
+         * @description Assumes the role of the backend the scoped project is linked to, makes one read-only call to each queue, the cluster and the log group, and records the result, so a customer can confirm a fix to their role or stack. It never changes the backend's status; use `enable` for a disabled one.
          */
-        put: operations["setProjectRunnerBackend"];
-        post?: never;
+        post: operations["verifyProjectRunnerBackend"];
         delete?: never;
         options?: never;
         head?: never;
@@ -5596,7 +5816,7 @@ export interface paths {
         put?: never;
         /**
          * ⚙️ Upsert a GitHub link
-         * @description Creates or updates the GitHub account link for the given user. Super-admin only.
+         * @description Creates or updates a GitHub account link. A signed-in user links their own account to the GitHub user who authorized `code`; system callers pass the user and profile directly.
          */
         post: operations["upsertGithubLink"];
         /**
@@ -5879,15 +6099,13 @@ export interface components {
             paid_at: string | null;
             /** @description Whether the invoice PDF is available. */
             has_pdf: boolean;
-            /** @description Whether a payment-processor tax invoice is available for download. */
-            has_tax_invoice: boolean;
             /** @description Whether this invoice can be paid online (unpaid and in a supported currency). */
             payable: boolean;
             /**
-             * @description Which provider pays this invoice's currency (USD via Dodo checkout sessions, INR via Razorpay Standard Checkout), or null if none does. Drives the Pay button's checkout flow.
+             * @description Which provider pays this invoice's currency (INR via Razorpay Standard Checkout), or null if none does. Drives the Pay button's checkout flow.
              * @enum {string|null}
              */
-            payment_provider: "dodo" | "razorpay" | null;
+            payment_provider: "razorpay" | null;
             /** @description Whether an unpaid invoice is past its due date plus the reminder grace period. Always false for paid invoices. */
             past_reminder_date: boolean;
         };
@@ -5900,22 +6118,6 @@ export interface components {
                 message: string;
             };
         };
-        InvoiceCheckoutSessionResponse: {
-            /** @description Response payload. */
-            data: {
-                /** @description Single-use hosted checkout URL (expires in 24h). */
-                checkout_url: string;
-                /** @description Dodo checkout session ID. */
-                session_id: string;
-            };
-        };
-        CreateInvoiceCheckoutSessionRequest: {
-            /**
-             * Format: uri
-             * @description Dashboard URL Dodo redirects to after payment (gets payment_id and status query params appended).
-             */
-            return_url: string;
-        };
         InvoiceRazorpayOrderResponse: {
             /** @description Response payload. */
             data: {
@@ -6368,6 +6570,16 @@ export interface components {
                         overage_price_cents: number | null;
                     }[];
                 } | null;
+                /** @description The org's live Dodo subscription now, or null when it's billed by invoice or has none. */
+                subscription: {
+                    /**
+                     * @description `past_due` / `on_hold`: the last renewal payment failed and is being retried. A paused subscription, or one whose plan was ended (End plan) whatever its Dodo status, holds no plan, so `subscription` is null.
+                     * @enum {string}
+                     */
+                    status: "active" | "past_due" | "on_hold";
+                    /** @description When the subscription next renews (ISO 8601). */
+                    next_billing_date: string;
+                } | null;
             };
         };
         PlanAssignmentListResponse: {
@@ -6472,6 +6684,8 @@ export interface components {
             base_price_cents: number;
             /** @description `active` or `retired`. Retired plans keep existing assignments. */
             status: string;
+            /** @description Dodo product that bills this plan by subscription; null when it isn't sold through Dodo. */
+            dodo_product_id: string | null;
             /** @description ISO-8601 creation timestamp. */
             created_at: string;
             /** @description Metered allowances and overage rates. */
@@ -6509,6 +6723,8 @@ export interface components {
             currency?: "usd" | "inr" | "aed";
             /** @description Monthly base price in cents of `currency`. */
             base_price_cents: number;
+            /** @description Dodo product that bills this plan by subscription, in this environment's Dodo mode. New Dodo checkouts use the newest active plan that has one. */
+            dodo_product_id?: string;
             /**
              * @description Metered allowances, in display order.
              * @default []
@@ -6535,11 +6751,19 @@ export interface components {
         BillingMonthSummaryResponse: {
             /** @description Response payload. */
             data: {
-                /** @description Usage month, YYYY-MM (UTC). */
+                /** @description Usage month, YYYY-MM (UTC). For a billing cycle, the month it starts in. */
                 month: string;
+                /** @description The period's key (YYYY-MM-DD), to pass as `period`: the 1st for a calendar month, the scheduled start date for a billing cycle. */
+                period_key: string;
+                /**
+                 * @description `month`: a UTC calendar month. `cycle`: a Dodo billing cycle [previous_billing_date, next_billing_date).
+                 * @enum {string}
+                 */
+                period_kind: "month" | "cycle";
                 period_start: string;
                 /** @description Exclusive (ISO 8601). */
                 period_end: string;
+                /** @description Whether this is the current period (month or cycle). */
                 is_current_month: boolean;
                 /** @description The shared plan in effect; null for no plan or a custom contract. */
                 plan: {
@@ -6557,7 +6781,7 @@ export interface components {
                 }[];
                 overage_cents: number;
                 projected_overage_cents: number | null;
-                /** @description Overage of the previous usage month, as a guide when picking a limit. Current month only. */
+                /** @description Overage of the previous usage period, as a guide when picking a limit. Current period only. */
                 last_month_overage_cents: number | null;
                 usage_limit: components["schemas"]["UsageLimit"];
             };
@@ -6567,7 +6791,7 @@ export interface components {
             meter: "ai_credits" | "test_minutes";
             included_qty: number | null;
             overage_price_cents: number | null;
-            /** @description Units used so far this month. */
+            /** @description Units used so far this period. */
             used: number;
             /** @description Projected units at month end (trailing 7-day pace); null when too early to project. */
             projected: number | null;
@@ -6577,14 +6801,14 @@ export interface components {
         UsageLimit: {
             /** @description Whether the org's plan supports a usage limit (catalog plans with overage pricing). */
             available: boolean;
-            /** @description Most overage allowed per usage month, in cents of the plan currency. Null means no limit. */
+            /** @description Most overage allowed per usage period (calendar month, or Dodo billing cycle), in cents of the plan currency. Null means no limit. */
             cap_cents: number | null;
             /**
-             * @description `warning` at 80% of the limit (or, for a $0 limit, 80% of any allowance); `reached` when new work is paused.
+             * @description `warning` once the bill (plan + overage) reaches 80% of plan + cap, skipped when that is at or below the plan price (including a $0 limit); `reached` when new work is paused.
              * @enum {string}
              */
             status: "none" | "ok" | "warning" | "reached";
-            /** @description When the limit was reached this month (ISO 8601). */
+            /** @description When the limit was reached this period (ISO 8601). */
             reached_at: string | null;
             updated_at: string | null;
             /** @description Who made a change. */
@@ -6596,19 +6820,37 @@ export interface components {
                 name: string | null;
             } | null;
         };
-        UsageLimitResponse: {
+        BillingPeriodsResponse: {
             /** @description Response payload. */
-            data: {
-                /** @description Whether the org's plan supports a usage limit (catalog plans with overage pricing). */
-                available: boolean;
-                /** @description Most overage allowed per usage month, in cents of the plan currency. Null means no limit. */
+            data: components["schemas"]["BillingPeriod"][];
+        };
+        BillingPeriod: {
+            /** @description Pass as `period` to the month summary (YYYY-MM-DD). */
+            key: string;
+            /**
+             * @description `month`: a UTC calendar month. `cycle`: a Dodo billing cycle [previous_billing_date, next_billing_date).
+             * @enum {string}
+             */
+            kind: "month" | "cycle";
+            /** @description Inclusive (ISO 8601). */
+            start: string;
+            /** @description Exclusive (ISO 8601). */
+            end: string;
+            is_current: boolean;
+        };
+        UsageLimitResponse: {
+            /** @description Response payload. */
+            data: {
+                /** @description Whether the org's plan supports a usage limit (catalog plans with overage pricing). */
+                available: boolean;
+                /** @description Most overage allowed per usage period (calendar month, or Dodo billing cycle), in cents of the plan currency. Null means no limit. */
                 cap_cents: number | null;
                 /**
-                 * @description `warning` at 80% of the limit (or, for a $0 limit, 80% of any allowance); `reached` when new work is paused.
+                 * @description `warning` once the bill (plan + overage) reaches 80% of plan + cap, skipped when that is at or below the plan price (including a $0 limit); `reached` when new work is paused.
                  * @enum {string}
                  */
                 status: "none" | "ok" | "warning" | "reached";
-                /** @description When the limit was reached this month (ISO 8601). */
+                /** @description When the limit was reached this period (ISO 8601). */
                 reached_at: string | null;
                 updated_at: string | null;
                 /** @description Who made a change. */
@@ -6642,10 +6884,219 @@ export interface components {
             metadata?: unknown;
             created_at: string;
         };
-        RunnerBackendListResponse: {
+        SubscriptionCheckoutResponse: {
+            /** @description Response payload. */
+            data: {
+                /** @description Dodo hosted checkout to open. It returns to the billing page. */
+                checkout_url: string;
+            };
+        };
+        SubscriptionOfferResponse: {
+            /** @description Response payload. */
+            data: {
+                /** @description Whether the org can subscribe through Dodo now. */
+                available: boolean;
+                /**
+                 * @description Why not, when `available` is false.
+                 * @enum {string|null}
+                 */
+                reason: "not_configured" | "no_org" | "inr" | "has_plan" | "no_plan" | null;
+                /** @description The plan checkout would subscribe to, when available. */
+                plan: {
+                    /** @description Plan name, e.g. `Managed`. */
+                    name: string;
+                    /** @description Currency of the prices below, e.g. `usd`. */
+                    currency: string;
+                    /** @description Monthly base price in cents of `currency`. */
+                    base_price_cents: number;
+                    /** @description Metered allowances and overage rates. */
+                    meters: {
+                        /** @description Meter key, e.g. `ai_credits` or `test_minutes`. */
+                        meter: string;
+                        /** @description Units included each month. */
+                        included_qty: number | null;
+                        /** @description Price per unit above the allowance, in cents of `currency`; may be fractional. */
+                        overage_price_cents: number | null;
+                    }[];
+                } | null;
+            };
+        };
+        SubscriptionPortalResponse: {
+            /** @description Response payload. */
+            data: {
+                /** @description Short-lived Dodo customer portal session: update the card, download invoices. */
+                portal_url: string;
+            };
+        };
+        SubscriptionEndResponse: {
+            /** @description Response payload. */
+            data: {
+                /**
+                 * @description What the subscription became in Dodo: `cancelled` when there was no usage beyond the plan's allowance; `paused` when there was, which Dodo charges on pausing (the subscription is cancelled once that charge succeeds). Either way the plan has ended.
+                 * @enum {string}
+                 */
+                status: "cancelled" | "paused";
+                /** @description Whether Dodo charges a final payment for this cycle's usage beyond the allowance. */
+                final_charge: boolean;
+            };
+        };
+        SubscriptionUsageReconcileResponse: {
+            /** @description Response payload. */
+            data: {
+                subscription_id: string;
+                cycle_start: string;
+                cycle_end: string;
+                meters: {
+                    ai_credits: {
+                        /** @description Our usage in the cycle. */
+                        ours: number;
+                        /** @description What Dodo's events in the cycle add up to. */
+                        dodo: number;
+                        our_events: number;
+                        dodo_events: number;
+                    };
+                    test_minutes: {
+                        /** @description Our usage in the cycle. */
+                        ours: number;
+                        /** @description What Dodo's events in the cycle add up to. */
+                        dodo: number;
+                        our_events: number;
+                        dodo_events: number;
+                    };
+                };
+                /** @description Event ids of our usage rows that Dodo has no event for. */
+                missing: string[];
+                /** @description Dodo event ids in the cycle with no usage row of ours. */
+                extra: string[];
+                /** @description Events whose quantity differs from our usage row's (Dodo keeps the first quantity sent). */
+                changed: {
+                    event_id: string;
+                    ours: number;
+                    dodo: number;
+                }[];
+            };
+        };
+        ClaimRunnerBackendResponse: {
+            /** @description Response payload. */
+            data: {
+                /** @description The registered backend, or null when nothing matched. */
+                runner_backend_id: number | null;
+                /** @enum {string|null} */
+                status: "pending" | "active" | "disabled" | null;
+                /** @description What the call did. */
+                message: string;
+            };
+        };
+        ClaimRunnerBackendBody: {
+            /** @description The token from the installation's registration link. */
+            registration_token: string;
+            /**
+             * @description The CloudFormation event the stack is handling.
+             * @enum {string}
+             */
+            request_type: "Create" | "Update" | "Delete";
+            /** @description ARN of the calling stack. */
+            stack_id: string;
+            /** @description The stack's control-plane role. */
+            role_arn: string;
+            /** @description The stack's ECS cluster. */
+            cluster_name: string;
+            /** @description The stack's worker log group. */
+            log_group_name: string;
+            /** @description The stack's job queue prefix. */
+            queue_prefix: string;
+            /** @description Template release. */
+            stack_version: string;
+            /**
+             * Format: date-time
+             * @description When the template release was published.
+             */
+            stack_released_at?: string;
+            /** @description Worker image. */
+            worker_version: string;
+            /** @description Job protocol version. */
+            protocol_version: string;
+            /** @description Optional features the template supports. */
+            capabilities: string[];
+        };
+        ProjectRunnerBackendDetailResponse: {
+            /** @description Response payload. */
+            data: {
+                /** @description The backend the project's new runs are placed on, or null for Empirical-hosted. */
+                runner_backend: {
+                    /** @description Runner backend ID. */
+                    id: number;
+                    /** @description Organisation that owns the installation. */
+                    org_id: number;
+                    /** @description Human-readable name. */
+                    name: string;
+                    /** @description AWS account the installation runs in. */
+                    aws_account_id: string;
+                    /** @description AWS region of the installation. */
+                    region: string;
+                    /** @description Role api-worker assumes to drive the plane. */
+                    role_arn: string;
+                    /** @description ECS cluster name. */
+                    cluster_name: string;
+                    /** @description CloudWatch log group of the worker. */
+                    log_group_name: string;
+                    /** @description Worker container name. */
+                    container_name: string;
+                    /** @description Job queue URLs are `${queue_prefix}-${machineSize}`. */
+                    queue_prefix: string;
+                    /**
+                     * @description `pending` until verified; only `active` backends receive runs.
+                     * @enum {string}
+                     */
+                    status: "pending" | "active" | "disabled";
+                    /** @description ISO-8601 time of the last successful verify. */
+                    last_verified_at: string | null;
+                    /** @description ISO-8601 time of the last verify, manual or scheduled, whatever its outcome. */
+                    last_checked_at: string | null;
+                    /** @description Outcome of the last verify; null if never run. */
+                    last_check_ok: boolean | null;
+                    /** @description Every check from the last verify. */
+                    last_check_results: components["schemas"]["RunnerBackendCheck"][] | null;
+                    /** @description ISO-8601 start of the current run of failed checks; null while passing. A failing check does not change `status`. */
+                    check_failing_since: string | null;
+                    /** @description Release of the CloudFormation template the installation runs, as its stack last reported. */
+                    stack_version: string | null;
+                    /** @description ISO-8601 time that release was published, if known. */
+                    stack_released_at: string | null;
+                    /** @description Worker image the installation runs. */
+                    worker_version: string | null;
+                    /** @description Job protocol version the installation speaks. */
+                    protocol_version: string | null;
+                    /** @description Optional features the installation supports. */
+                    capabilities: string[];
+                    /** @description ARN of the CloudFormation stack that registered the installation. */
+                    stack_id: string | null;
+                    /** @description ISO-8601 time the installation's stack first called home; null until then. */
+                    registration_claimed_at: string | null;
+                    /** @description ISO-8601 expiry of the current registration link, if one was minted. Ignored once claimed. */
+                    registration_token_expires_at: string | null;
+                    /** @description ISO-8601 creation time. */
+                    created_at: string;
+                    /** @description ISO-8601 last-update time. */
+                    updated_at: string;
+                } | null;
+            };
+        };
+        RunnerBackendCheck: {
+            /** @description `assume_role`, `job_queue`, `scaler_trigger_queue`, `ecs_cluster`, `ecs_tasks` or `worker_logs`. */
+            name: string;
+            /** @description Whether the check passed. */
+            ok: boolean;
+            /** @description The resource checked, or the AWS error. */
+            detail: string;
+        };
+        RunnerBackendVerifyResponse: {
             /** @description Response payload. */
             data: {
-                runner_backends: components["schemas"]["RunnerBackend"][];
+                /** @description True when every check passed. */
+                verified: boolean;
+                checks: components["schemas"]["RunnerBackendCheck"][];
+                runner_backend: components["schemas"]["RunnerBackend"];
             };
         };
         RunnerBackend: {
@@ -6661,8 +7112,6 @@ export interface components {
             region: string;
             /** @description Role api-worker assumes to drive the plane. */
             role_arn: string;
-            /** @description External ID the role's trust policy must require. Give it only to this installation's owner. */
-            external_id: string;
             /** @description ECS cluster name. */
             cluster_name: string;
             /** @description CloudWatch log group of the worker. */
@@ -6686,63 +7135,31 @@ export interface components {
             last_check_results: components["schemas"]["RunnerBackendCheck"][] | null;
             /** @description ISO-8601 start of the current run of failed checks; null while passing. A failing check does not change `status`. */
             check_failing_since: string | null;
+            /** @description Release of the CloudFormation template the installation runs, as its stack last reported. */
+            stack_version: string | null;
+            /** @description ISO-8601 time that release was published, if known. */
+            stack_released_at: string | null;
+            /** @description Worker image the installation runs. */
+            worker_version: string | null;
+            /** @description Job protocol version the installation speaks. */
+            protocol_version: string | null;
+            /** @description Optional features the installation supports. */
+            capabilities: string[];
+            /** @description ARN of the CloudFormation stack that registered the installation. */
+            stack_id: string | null;
+            /** @description ISO-8601 time the installation's stack first called home; null until then. */
+            registration_claimed_at: string | null;
+            /** @description ISO-8601 expiry of the current registration link, if one was minted. Ignored once claimed. */
+            registration_token_expires_at: string | null;
             /** @description ISO-8601 creation time. */
             created_at: string;
             /** @description ISO-8601 last-update time. */
             updated_at: string;
         };
-        RunnerBackendCheck: {
-            /** @description `assume_role`, `job_queue`, `scaler_trigger_queue`, `ecs_cluster`, `ecs_tasks` or `worker_logs`. */
-            name: string;
-            /** @description Whether the check passed. */
-            ok: boolean;
-            /** @description The resource checked, or the AWS error. */
-            detail: string;
-        };
-        RunnerBackendResponse: {
-            /** @description Response payload. */
-            data: {
-                runner_backend: components["schemas"]["RunnerBackend"];
-            };
-        };
-        CreateRunnerBackendBody: {
-            /** @description Owning organisation. */
-            org_id: number;
-            /** @description Human-readable name. */
-            name: string;
-            /** @description 12-digit AWS account ID. */
-            aws_account_id: string;
-            /** @description AWS region, e.g. `us-east-1`. */
-            region: string;
-            /** @description ARN of a role named `empirical-private-runner-*` in `aws_account_id`. */
-            role_arn: string;
-            /** @description ECS cluster name. */
-            cluster_name: string;
-            /** @description CloudWatch log group of the worker. */
-            log_group_name: string;
-            /** @description `https://sqs.<region>.amazonaws.com/<account>/<name>`; queues are `${queue_prefix}-${machineSize}`. */
-            queue_prefix: string;
-            /** @description Worker container name. Defaults to `test-run-worker`. */
-            container_name?: string;
-            /** @description Only for installations whose role already requires a fixed ID (Empirical's own dogfood). Generated otherwise. */
-            external_id?: string;
-        };
-        ProjectRunnerBackendResponse: {
-            /** @description Response payload. */
-            data: {
-                project_id: number;
-                runner_backend_id: number | null;
-            };
-        };
-        SetProjectRunnerBackendBody: {
-            /** @description An active backend of the project's organisation, or null for Empirical-hosted. */
-            runner_backend_id: number | null;
-        };
-        ProjectRunnerBackendDetailResponse: {
+        OrgRunnerBackendListResponse: {
             /** @description Response payload. */
             data: {
-                /** @description The backend the project's new runs are placed on, or null for Empirical-hosted. */
-                runner_backend: {
+                runner_backends: {
                     /** @description Runner backend ID. */
                     id: number;
                     /** @description Organisation that owns the installation. */
@@ -6755,8 +7172,6 @@ export interface components {
                     region: string;
                     /** @description Role api-worker assumes to drive the plane. */
                     role_arn: string;
-                    /** @description External ID the role's trust policy must require. Give it only to this installation's owner. */
-                    external_id: string;
                     /** @description ECS cluster name. */
                     cluster_name: string;
                     /** @description CloudWatch log group of the worker. */
@@ -6780,22 +7195,111 @@ export interface components {
                     last_check_results: components["schemas"]["RunnerBackendCheck"][] | null;
                     /** @description ISO-8601 start of the current run of failed checks; null while passing. A failing check does not change `status`. */
                     check_failing_since: string | null;
+                    /** @description Release of the CloudFormation template the installation runs, as its stack last reported. */
+                    stack_version: string | null;
+                    /** @description ISO-8601 time that release was published, if known. */
+                    stack_released_at: string | null;
+                    /** @description Worker image the installation runs. */
+                    worker_version: string | null;
+                    /** @description Job protocol version the installation speaks. */
+                    protocol_version: string | null;
+                    /** @description Optional features the installation supports. */
+                    capabilities: string[];
+                    /** @description ARN of the CloudFormation stack that registered the installation. */
+                    stack_id: string | null;
+                    /** @description ISO-8601 time the installation's stack first called home; null until then. */
+                    registration_claimed_at: string | null;
+                    /** @description ISO-8601 expiry of the current registration link, if one was minted. Ignored once claimed. */
+                    registration_token_expires_at: string | null;
                     /** @description ISO-8601 creation time. */
                     created_at: string;
                     /** @description ISO-8601 last-update time. */
                     updated_at: string;
-                } | null;
+                    /** @description Projects whose new runs use this runner. */
+                    projects: {
+                        id: number;
+                        name: string;
+                        slug: string;
+                    }[];
+                }[];
             };
         };
-        RunnerBackendVerifyResponse: {
+        SetupRunnerBackendResponse: {
+            /** @description Response payload. */
+            data: {
+                runner_backend: components["schemas"]["RunnerBackend"];
+                /** @description Response payload. */
+                registration: {
+                    /** @description Credential the installation's stack calls home with. Shown once; Empirical keeps only its hash. */
+                    registration_token: string;
+                    /** @description ISO-8601 time the link stops working if unused. */
+                    expires_at: string;
+                    /** @description Release of the template the link installs. */
+                    stack_version: string;
+                    /** @description The template the link installs. */
+                    template_url: string;
+                    /** @description AWS console link that opens CloudFormation with the template and Empirical's parameters filled in. */
+                    quick_create_url: string;
+                };
+            };
+        };
+        SetupRunnerBackendBody: {
+            /** @description 12-digit AWS account to install the runner in. */
+            aws_account_id: string;
+            /** @description AWS region with a published template, e.g. `us-east-1`. */
+            region: string;
+        };
+        ProjectRunnerBackendResponse: {
+            /** @description Response payload. */
+            data: {
+                project_id: number;
+                runner_backend_id: number | null;
+            };
+        };
+        SetProjectRunnerBackendBody: {
+            /** @description An active backend of the project's organisation, or null for Empirical-hosted. */
+            runner_backend_id: number | null;
+        };
+        RunnerBackendRegistrationResponse: {
+            /** @description Response payload. */
+            data: {
+                /** @description Credential the installation's stack calls home with. Shown once; Empirical keeps only its hash. */
+                registration_token: string;
+                /** @description ISO-8601 time the link stops working if unused. */
+                expires_at: string;
+                /** @description Release of the template the link installs. */
+                stack_version: string;
+                /** @description The template the link installs. */
+                template_url: string;
+                /** @description AWS console link that opens CloudFormation with the template and Empirical's parameters filled in. */
+                quick_create_url: string;
+            };
+        };
+        DisconnectRunnerBackendResponse: {
+            /** @description Response payload. */
+            data: {
+                runner_backend: components["schemas"]["RunnerBackend"];
+                /** @description Projects moved back to Empirical-hosted runs. */
+                unlinked_project_ids: number[];
+            };
+        };
+        RemoveRunnerBackendResponse: {
+            /** @description Response payload. */
+            data: {
+                /** @enum {boolean} */
+                removed: true;
+            };
+        };
+        RunnerBackendResponse: {
             /** @description Response payload. */
             data: {
-                /** @description True when every check passed. */
-                verified: boolean;
-                checks: components["schemas"]["RunnerBackendCheck"][];
                 runner_backend: components["schemas"]["RunnerBackend"];
             };
         };
+        RenameRunnerBackendBody: {
+            /** @description Name shown for the runner in Empirical. */
+            name: string;
+        };
         CreateSystemMessageResponse: {
             data: {
                 system_message: components["schemas"]["SystemMessage"];
@@ -7504,7 +8008,25 @@ export interface components {
             /** @description Opaque agent chat state. */
             chat_state?: unknown;
             /** @description Tests impacted by this session. */
-            impacted_tests?: unknown;
+            impacted_tests: {
+                test_case: {
+                    name: string;
+                    suites: string[];
+                    file_path: string;
+                    start_line: number;
+                    end_line: number;
+                };
+                /** @enum {string} */
+                type: "added" | "removed" | "modified";
+                modified_by: {
+                    file_path: string;
+                    line: {
+                        number: number;
+                        /** @enum {string} */
+                        type: "added" | "removed" | "modified";
+                    };
+                }[] | null;
+            }[];
             /** @description Whether the agent is awaiting user input. */
             ask_user_for_input: boolean | null;
             /** @description Langfuse trace ID. */
@@ -7897,11 +8419,11 @@ export interface components {
         ResolveMembershipRequest: {
             /**
              * Format: email
-             * @description Verified email of the user.
+             * @description Verified email of the user. Required for system callers; ignored for a signed-in user, whose confirmed email is read server-side.
              */
-            email: string;
-            /** @description Supabase user id to grant membership to. */
-            user_id: string;
+            email?: string;
+            /** @description Supabase user id to grant membership to. Required for system callers; ignored for a signed-in user, who resolves their own. */
+            user_id?: string;
         };
         OrgUpdateResponse: {
             /** @description Response payload. */
@@ -9175,10 +9697,10 @@ export interface components {
             /** @description ISO 8601 creation timestamp. */
             created_at: string | null;
         };
-        SlackAppInstallMutationResponse: {
+        SlackAppInstallUpsertResponse: {
             /** @description Whether the write succeeded. */
             success: boolean;
-            /** @description The Slack app install. */
+            /** @description The Slack app install; null when the install was into Empirical's own workspace, which is not stored per org. */
             data: {
                 /** @description Slack app install ID. */
                 id: number;
@@ -9205,7 +9727,15 @@ export interface components {
                 team_url: string | null;
                 /** @description ISO 8601 creation timestamp. */
                 created_at: string | null;
-            };
+            } | null;
+            /** @description True when nothing was stored (Empirical's workspace). */
+            skipped?: boolean;
+        };
+        SlackScopeRefreshResponse: {
+            /** @description Whether the refresh succeeded. */
+            success: boolean;
+            /** @description Granted OAuth scopes (CSV). */
+            scope: string;
         };
         SlackAppInstallResponse: {
             /** @description Response payload. */
@@ -9411,22 +9941,54 @@ export interface components {
             /** @description Pull request number in the authenticated project's repository. */
             pr_number: number;
         };
-        ChatSessionUsersResponse: {
-            /** @description Response payload. */
-            data: components["schemas"]["ChatSessionUserDetail"][];
-        };
-        ChatSessionUserDetail: {
-            /** @description Supabase user ID. */
-            id: string;
-            /** @description User email. */
-            email: string;
-            /** @description Display name. */
-            name: string;
-            /** @description Avatar URL. */
-            picture: string;
-        };
-        ChatSessionCombinedAnalyticsResponse: {
-            /** @description Response payload. */
+        SlackAppInstallMutationResponse: {
+            /** @description Whether the write succeeded. */
+            success: boolean;
+            /** @description The Slack app install. */
+            data: {
+                /** @description Slack app install ID. */
+                id: number;
+                /** @description Organisation ID. */
+                org_id: number;
+                /** @description Slack app ID. */
+                slack_app_id: string;
+                /** @description Authorizing Slack user ID. */
+                authed_user_id: string;
+                /** @description OAuth scopes (CSV). */
+                scope: string;
+                /** @description OAuth token type. */
+                token_type: string;
+                /** @description Bot user ID. */
+                bot_user_id: string;
+                /** @description Slack workspace (team) ID. */
+                team_id: string;
+                /** @description Slack workspace name. */
+                team_name: string;
+                /**
+                 * Format: uri
+                 * @description Slack workspace URL learned from auth.test.
+                 */
+                team_url: string | null;
+                /** @description ISO 8601 creation timestamp. */
+                created_at: string | null;
+            };
+        };
+        ChatSessionUsersResponse: {
+            /** @description Response payload. */
+            data: components["schemas"]["ChatSessionUserDetail"][];
+        };
+        ChatSessionUserDetail: {
+            /** @description Supabase user ID. */
+            id: string;
+            /** @description User email. */
+            email: string;
+            /** @description Display name. */
+            name: string;
+            /** @description Avatar URL. */
+            picture: string;
+        };
+        ChatSessionCombinedAnalyticsResponse: {
+            /** @description Response payload. */
             data: {
                 my: components["schemas"]["ChatSessionChartData"];
                 overall: components["schemas"]["ChatSessionChartData"];
@@ -9523,8 +10085,11 @@ export interface components {
             } | null;
             /** @description Number of the session's most recently updated PR, if any. */
             pr_number: number | null;
-            /** @description Status of the session's most recently updated PR ('unopened' when it has none). */
-            pr_status: string;
+            /**
+             * @description Status of the session's most recently updated PR ('unopened' when it has none).
+             * @enum {string}
+             */
+            pr_status: "unopened" | "open" | "opened" | "closed" | "merged";
             /** @description Name of the owning project. */
             project_name: string | null;
             /** @description Repository name of the owning project. */
@@ -9579,7 +10144,25 @@ export interface components {
             /** @description Opaque agent chat state. */
             chat_state?: unknown;
             /** @description Tests impacted by this session. */
-            impacted_tests?: unknown;
+            impacted_tests: {
+                test_case: {
+                    name: string;
+                    suites: string[];
+                    file_path: string;
+                    start_line: number;
+                    end_line: number;
+                };
+                /** @enum {string} */
+                type: "added" | "removed" | "modified";
+                modified_by: {
+                    file_path: string;
+                    line: {
+                        number: number;
+                        /** @enum {string} */
+                        type: "added" | "removed" | "modified";
+                    };
+                }[] | null;
+            }[];
             /** @description Whether the agent is awaiting user input. */
             ask_user_for_input: boolean | null;
             /** @description Langfuse trace ID. */
@@ -9973,14 +10556,83 @@ export interface components {
             /** @description Response payload. */
             data: {
                 /** @description Reporter App installation rows. */
-                gh_app_installs: unknown[];
+                gh_app_installs: components["schemas"]["GhReporterAppInstall"][];
+            };
+        };
+        GhReporterAppInstall: {
+            id: number;
+            org_id: number | null;
+            app_installation_id: string | null;
+            gh_organization: string | null;
+            gh_repos: {
+                id: number;
+                node_id: string;
+                name: string;
+                full_name: string;
+                private: boolean;
+            }[] | null;
+            /** @enum {string|null} */
+            installation_status: "requested" | "installed" | null;
+            permissions: {
+                /** @enum {string} */
+                metadata: "read";
+                /** @enum {string} */
+                checks?: "write" | "read";
+                /** @enum {string} */
+                pull_requests?: "write" | "read";
+                /** @enum {string} */
+                contents?: "write" | "read";
+                /** @enum {string} */
+                issues?: "write" | "read";
+                /** @enum {string} */
+                merge_queues?: "write" | "read";
+                /** @enum {string} */
+                repository_custom_properties?: "write" | "read";
+            } & {
+                [key: string]: unknown;
             };
+            created_at: string | null;
+            updated_at: string | null;
         };
         GhReporterInstallResponse: {
             /** @description Response payload. */
             data: {
-                /** @description The reporter App installation row. */
-                installation?: unknown;
+                /** @description The reporter App installation row, or null if the write matched nothing. */
+                installation: {
+                    id: number;
+                    org_id: number | null;
+                    app_installation_id: string | null;
+                    gh_organization: string | null;
+                    gh_repos: {
+                        id: number;
+                        node_id: string;
+                        name: string;
+                        full_name: string;
+                        private: boolean;
+                    }[] | null;
+                    /** @enum {string|null} */
+                    installation_status: "requested" | "installed" | null;
+                    permissions: {
+                        /** @enum {string} */
+                        metadata: "read";
+                        /** @enum {string} */
+                        checks?: "write" | "read";
+                        /** @enum {string} */
+                        pull_requests?: "write" | "read";
+                        /** @enum {string} */
+                        contents?: "write" | "read";
+                        /** @enum {string} */
+                        issues?: "write" | "read";
+                        /** @enum {string} */
+                        merge_queues?: "write" | "read";
+                        /** @enum {string} */
+                        repository_custom_properties?: "write" | "read";
+                    } & {
+                        [key: string]: unknown;
+                    };
+                    created_at: string | null;
+                    updated_at: string | null;
+                } | null;
             };
         };
         GhReporterDeliveriesResponse: {
@@ -10085,9 +10737,24 @@ export interface components {
             /** @description Response payload. */
             data: {
                 /** @description Main App installation rows. */
-                gh_app_installs: unknown[];
+                gh_app_installs: components["schemas"]["GhMainAppInstall"][];
             };
         };
+        GhMainAppInstall: {
+            id: number;
+            org_id: number;
+            app_installation_id: string;
+            gh_organization: string | null;
+            gh_repos: {
+                id: number;
+                node_id: string;
+                name: string;
+                full_name: string;
+                private: boolean;
+            }[] | null;
+            created_at: string | null;
+            updated_at: string | null;
+        };
         GhMainMetadataResponse: {
             /** @description Response payload. */
             data: {
@@ -10108,8 +10775,22 @@ export interface components {
         GhMainInstallResponse: {
             /** @description Response payload. */
             data: {
-                /** @description The main App installation row. */
-                installation?: unknown;
+                /** @description The main App installation row, or null if the write matched nothing. */
+                installation: {
+                    id: number;
+                    org_id: number;
+                    app_installation_id: string;
+                    gh_organization: string | null;
+                    gh_repos: {
+                        id: number;
+                        node_id: string;
+                        name: string;
+                        full_name: string;
+                        private: boolean;
+                    }[] | null;
+                    created_at: string | null;
+                    updated_at: string | null;
+                } | null;
             };
         };
         GithubProxyError: {
@@ -10168,22 +10849,29 @@ export interface components {
         CreateJiraInstallationRequest: {
             /** @description Organisation the installation belongs to. */
             org_id: number;
-            /** @description Atlassian cloud ID of the Jira site. */
-            jira_cloud_id: string;
+            /** @description OAuth code from Atlassian's redirect. Required for a signed-in user. */
+            code?: string;
             /**
              * Format: uri
-             * @description Base URL of the Jira site.
+             * @description Redirect URI the authorize request used; Atlassian requires it to match. Required with `code`.
              */
-            jira_site_url: string;
-            /** @description OAuth access token. */
-            jira_access_token: string;
-            /** @description OAuth refresh token. */
-            jira_refresh_token: string;
+            redirect_uri?: string;
+            /** @description Atlassian cloud ID. System callers only. */
+            jira_cloud_id?: string;
+            /**
+             * Format: uri
+             * @description Base URL of the Jira site. System callers only.
+             */
+            jira_site_url?: string;
+            /** @description OAuth access token. System callers only. */
+            jira_access_token?: string;
+            /** @description OAuth refresh token. System callers only. */
+            jira_refresh_token?: string;
             /**
              * Format: date-time
-             * @description Expiry timestamp of the access token.
+             * @description Expiry of the access token. System callers only.
              */
-            jira_access_token_expires_at: string | null;
+            jira_access_token_expires_at?: string | null;
             /** @description When true, register the Jira webhook after install. */
             register_webhook?: boolean;
         };
@@ -10257,6 +10945,9 @@ export interface components {
             /** @description Webhook expiry (ISO 8601), or null. */
             webhookExpiresAt: string | null;
         };
+        RequestIngestionProviderPayload: {
+            [key: string]: unknown;
+        };
         LinearInstallListResponse: {
             /** @description Installations for the organization. */
             data: components["schemas"]["LinearAppInstall"][];
@@ -12464,6 +13155,13 @@ export interface components {
                         id: number;
                         title: string | null;
                     } | null;
+                    /** @description The customer-hosted runner (Private Runner) the run was dispatched to. Null for runs on Empirical's hosted runners. */
+                    runner_backend: {
+                        id: number;
+                        name: string;
+                        aws_account_id: string;
+                        region: string;
+                    } | null;
                     /** @description For a pending run held back by its concurrency group (on_conflict=wait), the in-progress run it is waiting on. Null when the run is not pending or nothing blocks it. */
                     waiting_on_test_run_id: number | null;
                     /** @description First page of ledger-sourced cases, ordered failed → flaky → others so the default 'failed' filter and the failure-first list render correctly on first paint. Shipped inline so the list renders without waiting on a fetch. The client refetches the full set. */
@@ -13104,7 +13802,7 @@ export interface components {
             };
         };
         DodoWebhookAckResponse: {
-            /** @description Ack. */
+            /** @description Acknowledgement. */
             message: string;
         };
         RazorpayWebhookAckResponse: {
@@ -13532,7 +14230,7 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description The organisation has an overdue invoice. */
+            /** @description Billing blocked: an overdue invoice, a failed renewal, no active plan, or the spend limit reached. */
             402: {
                 headers: {
                     [name: string]: unknown;
@@ -13780,7 +14478,7 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description The organisation has an overdue invoice. */
+            /** @description Billing blocked: an overdue invoice, a failed renewal, no active plan, or the spend limit reached. */
             402: {
                 headers: {
                     [name: string]: unknown;
@@ -15862,6 +16560,56 @@ export interface operations {
             };
         };
     };
+    refreshSlackAppScopes: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": {
+                    /** @description OAuth code from Slack's redirect. */
+                    code: string;
+                    /**
+                     * Format: uri
+                     * @description Redirect URI the authorize request used.
+                     */
+                    redirect_uri: string;
+                };
+            };
+        };
+        responses: {
+            /** @description The scopes were refreshed. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SlackScopeRefreshResponse"];
+                };
+            };
+            /** @description The code was for another workspace. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Slack rejected the OAuth code. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
     slackAuthTest: {
         parameters: {
             query?: never;
@@ -15959,22 +16707,29 @@ export interface operations {
                 "application/json": {
                     /** @description Organisation ID. */
                     org_id: number;
-                    /** @description Slack app ID. */
-                    slack_app_id: string;
-                    /** @description Authorizing Slack user ID. */
-                    authed_user_id: string;
-                    /** @description OAuth scopes (CSV). */
-                    scope: string;
-                    /** @description OAuth token type. */
-                    token_type: string;
-                    /** @description OAuth access token. */
-                    access_token: string;
-                    /** @description Bot user ID. */
-                    bot_user_id: string;
-                    /** @description Slack workspace (team) ID. */
-                    team_id: string;
-                    /** @description Slack workspace name. */
-                    team_name: string;
+                    /** @description OAuth code from Slack's redirect. Required for a signed-in user. */
+                    code?: string;
+                    /**
+                     * Format: uri
+                     * @description Redirect URI the authorize request used; Slack requires it to match. Required with `code`.
+                     */
+                    redirect_uri?: string;
+                    /** @description Slack app ID. System callers only. */
+                    slack_app_id?: string;
+                    /** @description Authorizing Slack user ID. System callers only. */
+                    authed_user_id?: string;
+                    /** @description OAuth scopes (CSV). System callers only. */
+                    scope?: string;
+                    /** @description OAuth token type. System callers only. */
+                    token_type?: string;
+                    /** @description OAuth access token. System callers only. */
+                    access_token?: string;
+                    /** @description Bot user ID. System callers only. */
+                    bot_user_id?: string;
+                    /** @description Slack workspace (team) ID. System callers only. */
+                    team_id?: string;
+                    /** @description Slack workspace name. System callers only. */
+                    team_name?: string;
                 };
             };
         };
@@ -15985,7 +16740,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["SlackAppInstallMutationResponse"];
+                    "application/json": components["schemas"]["SlackAppInstallUpsertResponse"];
                 };
             };
             /** @description Invalid request. */
@@ -15997,6 +16752,15 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description Slack rejected the OAuth code. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
             /** @description Forbidden. */
             403: {
                 headers: {
@@ -19173,8 +19937,10 @@ export interface operations {
     getBillingMonthSummary: {
         parameters: {
             query?: {
-                /** @description Usage month (YYYY-MM, UTC). Defaults to the current month. */
+                /** @description A UTC calendar month (YYYY-MM), for any org. Defaults to the current period. */
                 month?: string;
+                /** @description A usage period by key (YYYY-MM-DD, from `/api/billing/periods`): a calendar month, or a billing cycle for an org on a live Dodo subscription. Defaults to the current period. */
+                period?: string;
             };
             header?: never;
             path?: never;
@@ -19191,7 +19957,7 @@ export interface operations {
                     "application/json": components["schemas"]["BillingMonthSummaryResponse"];
                 };
             };
-            /** @description Invalid month, or missing project scope. */
+            /** @description Invalid month or period, or missing project scope. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -19211,32 +19977,28 @@ export interface operations {
             };
         };
     };
-    setUsageLimit: {
+    listBillingPeriods: {
         parameters: {
-            query?: never;
+            query?: {
+                /** @description How many periods. Defaults to 2. */
+                count?: number;
+            };
             header?: never;
             path?: never;
             cookie?: never;
         };
-        requestBody?: {
-            content: {
-                "application/json": {
-                    /** @description Whole dollars, in cents; null removes it. */
-                    cap_cents: number | null;
-                };
-            };
-        };
+        requestBody?: never;
         responses: {
-            /** @description The updated usage limit. */
+            /** @description Usage periods, latest first. */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["UsageLimitResponse"];
+                    "application/json": components["schemas"]["BillingPeriodsResponse"];
                 };
             };
-            /** @description Invalid body, or the plan doesn't support a limit. */
+            /** @description Invalid query, or missing project scope. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -19256,29 +20018,31 @@ export interface operations {
             };
         };
     };
-    listUsageLimitEvents: {
+    reconcileSubscriptionUsage: {
         parameters: {
             query?: {
-                per_page?: number;
-                /** @description Return events older than this id (pagination cursor). */
-                before_id?: number;
+                cycle_end?: string;
+                cycle_start?: string;
             };
             header?: never;
-            path?: never;
+            path: {
+                /** @description Dodo subscription id. */
+                subscription_id: string;
+            };
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description Usage limit events. */
+            /** @description The reconciliation. */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["UsageLimitEventsResponse"];
+                    "application/json": components["schemas"]["SubscriptionUsageReconcileResponse"];
                 };
             };
-            /** @description Invalid query, or missing project scope. */
+            /** @description Payments are not configured, or an empty cycle. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -19287,7 +20051,7 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description The project has no org. */
+            /** @description No such subscription. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -19298,48 +20062,25 @@ export interface operations {
             };
         };
     };
-    listChatSessions: {
+    createSubscriptionCheckout: {
         parameters: {
-            query?: {
-                /** @description Restrict to a single project (ignored for bound principals). */
-                project_id?: number;
-                /** @description Include closed sessions when `true`. */
-                show_closed?: boolean | null;
-                /** @description Filter sessions by preset (all, active, merged). */
-                preset?: "all" | "active" | "merged";
-                /** @description Page number (1-indexed). Default 1. */
-                page?: number;
-                /** @description Items per page. Default 10. */
-                per_page?: number;
-                /** @description Optional Manager sidebar category: executor sessions, or all non-manager/non-executor user-facing sessions. */
-                category?: "executor" | "user";
-                /** @description Comma-separated project IDs to include. */
-                project_ids?: string;
-                /** @description Comma-separated project IDs to exclude. */
-                exclude_project_ids?: string;
-                /** @description Comma-separated creator user IDs to filter by. */
-                user_ids?: string;
-                /** @description Only sessions updated within this many days. */
-                updated_within_days?: number;
-                /** @description URL-encoded JSON array of generic filter conditions. */
-                filters?: string;
-            };
+            query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description Page of chat sessions. */
+            /** @description The checkout. */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["ChatSessionListResponse"];
+                    "application/json": components["schemas"]["SubscriptionCheckoutResponse"];
                 };
             };
-            /** @description Invalid request. */
+            /** @description Payments not configured, INR org, no plan for sale, or no email for the Dodo customer. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -19348,7 +20089,7 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description Project not found or not accessible. */
+            /** @description The project has no org. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -19357,8 +20098,270 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-        };
-    };
+            /** @description The org already has a plan or a live subscription. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    endSubscription: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The plan has ended. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SubscriptionEndResponse"];
+                };
+            };
+            /** @description Payments are not configured. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description The org has no active subscription. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description The subscription is on hold (pay first), is already being ended, or can't be ended in Dodo right now. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    getSubscriptionOffer: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The offer. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SubscriptionOfferResponse"];
+                };
+            };
+        };
+    };
+    createSubscriptionPortalSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The portal session. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SubscriptionPortalResponse"];
+                };
+            };
+            /** @description Payments are not configured. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description The org has no Dodo customer. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    setUsageLimit: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": {
+                    /** @description Whole dollars, in cents; null removes it. */
+                    cap_cents: number | null;
+                };
+            };
+        };
+        responses: {
+            /** @description The updated usage limit. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["UsageLimitResponse"];
+                };
+            };
+            /** @description Invalid body, or the plan doesn't support a limit. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description The project has no org. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    listUsageLimitEvents: {
+        parameters: {
+            query?: {
+                per_page?: number;
+                /** @description Return events older than this id (pagination cursor). */
+                before_id?: number;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Usage limit events. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["UsageLimitEventsResponse"];
+                };
+            };
+            /** @description Invalid query, or missing project scope. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description The project has no org. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    listChatSessions: {
+        parameters: {
+            query?: {
+                /** @description Restrict to a single project (ignored for bound principals). */
+                project_id?: number;
+                /** @description Include closed sessions when `true`. */
+                show_closed?: boolean | null;
+                /** @description Filter sessions by preset (all, active, merged). */
+                preset?: "all" | "active" | "merged";
+                /** @description Page number (1-indexed). Default 1. */
+                page?: number;
+                /** @description Items per page. Default 10. */
+                per_page?: number;
+                /** @description Optional Manager sidebar category: executor sessions, or all non-manager/non-executor user-facing sessions. */
+                category?: "executor" | "user";
+                /** @description Comma-separated project IDs to include. */
+                project_ids?: string;
+                /** @description Comma-separated project IDs to exclude. */
+                exclude_project_ids?: string;
+                /** @description Comma-separated creator user IDs to filter by. */
+                user_ids?: string;
+                /** @description Only sessions updated within this many days. */
+                updated_within_days?: number;
+                /** @description URL-encoded JSON array of generic filter conditions. */
+                filters?: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Page of chat sessions. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ChatSessionListResponse"];
+                };
+            };
+            /** @description Invalid request. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Project not found or not accessible. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
     createChatSession: {
         parameters: {
             query?: never;
@@ -20599,20 +21602,12 @@ export interface operations {
         requestBody?: {
             content: {
                 "application/json": {
-                    /** @description Event type, e.g. "payment.succeeded". */
+                    /** @description Event type, e.g. "subscription.active". */
                     type: string;
                     /** @description Event payload. */
                     data: {
-                        /** @description Dodo payment ID. */
-                        payment_id?: string;
-                        /** @description Charged amount in minor units, tax included. */
-                        total_amount?: number;
-                        /** @description Tax portion of total_amount in minor units. */
-                        tax?: number;
-                        /** @description Metadata set at checkout session creation. */
-                        metadata?: {
-                            [key: string]: string;
-                        };
+                        /** @description Dodo subscription ID. */
+                        subscription_id?: string;
                     };
                 };
             };
@@ -20636,12 +21631,21 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-        };
-    };
-    listEnvironmentVariables: {
-        parameters: {
-            query?: never;
-            header?: never;
+            /** @description Dodo API credentials are not configured. */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    listEnvironmentVariables: {
+        parameters: {
+            query?: never;
+            header?: never;
             path?: never;
             cookie?: never;
         };
@@ -21507,6 +22511,15 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description Caller cannot access the organisation. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
         };
     };
     getMainInstallationMetadata: {
@@ -21928,6 +22941,15 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description Caller cannot access the organisation. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
         };
     };
     getReporterInstallationMetadata: {
@@ -22706,6 +23728,15 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"] | components["schemas"]["InvoiceSimpleError"];
                 };
             };
+            /** @description The organisation is billed by Dodo. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
         };
     };
     getInvoice: {
@@ -22824,6 +23855,15 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description The target organisation is billed by Dodo. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
         };
     };
     listInvoiceBillingLines: {
@@ -23217,28 +24257,8 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-        };
-    };
-    listOrgInvoices: {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description The org's invoices. */
-            200: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["OrgInvoiceListResponse"];
-                };
-            };
-            /** @description Invalid request or missing project scope. */
-            400: {
+            /** @description The organisation is billed by Dodo. */
+            409: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -23248,32 +24268,25 @@ export interface operations {
             };
         };
     };
-    createInvoiceCheckoutSession: {
+    listOrgInvoices: {
         parameters: {
             query?: never;
             header?: never;
-            path: {
-                /** @description Invoice ID. */
-                id: string;
-            };
+            path?: never;
             cookie?: never;
         };
-        requestBody?: {
-            content: {
-                "application/json": components["schemas"]["CreateInvoiceCheckoutSessionRequest"];
-            };
-        };
+        requestBody?: never;
         responses: {
-            /** @description The checkout session. */
+            /** @description The org's invoices. */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["InvoiceCheckoutSessionResponse"];
+                    "application/json": components["schemas"]["OrgInvoiceListResponse"];
                 };
             };
-            /** @description Invalid request, unsupported currency, or Dodo not configured. */
+            /** @description Invalid request or missing project scope. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -23282,24 +24295,6 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description Invoice not found. */
-            404: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
-            /** @description Invoice has no outstanding amount. */
-            409: {
-                headers: {
-                    [name: string]: unknown;
-                };
-                content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
-                };
-            };
         };
     };
     downloadOrgInvoicePdf: {
@@ -23447,38 +24442,57 @@ export interface operations {
             };
         };
     };
-    downloadOrgInvoiceTaxInvoice: {
+    listUpcomingInvoiceReminders: {
         parameters: {
-            query?: never;
-            header?: never;
-            path: {
-                /** @description Invoice ID. */
-                id: string;
+            query?: {
+                /** @description Number of upcoming days to preview. Default 7. */
+                window_days?: string;
+                /** @description Page number (1-indexed). Default 1. */
+                page?: string;
+                /** @description Items per page. Default 50. */
+                per_page?: string;
             };
+            header?: never;
+            path?: never;
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description The tax invoice PDF. */
+            /** @description Paginated upcoming invoice reminders. */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/pdf": string;
+                    "application/json": components["schemas"]["UpcomingInvoiceRemindersResponse"];
                 };
             };
-            /** @description Invalid invoice id or payments not configured. */
-            400: {
+        };
+    };
+    receiveJiraWebhook: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["RequestIngestionProviderPayload"];
+            };
+        };
+        responses: {
+            /** @description Webhook processed. */
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
+                    "application/json": components["schemas"]["JiraWebhookResponse"];
                 };
             };
-            /** @description Invoice or its tax invoice not found. */
-            404: {
+            /** @description Invalid webhook payload. */
+            400: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -23486,31 +24500,13 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-        };
-    };
-    listUpcomingInvoiceReminders: {
-        parameters: {
-            query?: {
-                /** @description Number of upcoming days to preview. Default 7. */
-                window_days?: string;
-                /** @description Page number (1-indexed). Default 1. */
-                page?: string;
-                /** @description Items per page. Default 50. */
-                per_page?: string;
-            };
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        requestBody?: never;
-        responses: {
-            /** @description Paginated upcoming invoice reminders. */
-            200: {
+            /** @description No matching install or project. */
+            404: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["UpcomingInvoiceRemindersResponse"];
+                    "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
         };
@@ -23587,6 +24583,15 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description Atlassian rejected the OAuth code. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
             /** @description Caller cannot access the organisation. */
             403: {
                 headers: {
@@ -23820,6 +24825,57 @@ export interface operations {
             };
         };
     };
+    receiveLinearWebhook: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["RequestIngestionProviderPayload"];
+            };
+        };
+        responses: {
+            /** @description Webhook accepted. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["LinearWebhookResponse"];
+                };
+            };
+            /** @description Invalid webhook payload. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Invalid signature. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description No matching install or project. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
     listLinearInstallations: {
         parameters: {
             query: {
@@ -23873,20 +24929,27 @@ export interface operations {
                 "application/json": {
                     /** @description Organization the installation belongs to. */
                     org_id: number;
-                    /** @description Linear app user (actor) id. */
-                    linear_app_user_id: string;
-                    /** @description Linear organization id. */
-                    linear_organization_id: string;
-                    /** @description OAuth access token for the Linear API. */
-                    linear_access_token: string;
-                    /** @description OAuth refresh token for the Linear API. */
+                    /** @description OAuth code from Linear's redirect. Required for a signed-in user. */
+                    code?: string;
+                    /**
+                     * Format: uri
+                     * @description Redirect URI the authorize request used; Linear requires it to match. Required with `code`.
+                     */
+                    redirect_uri?: string;
+                    /** @description Linear app user (actor) id. System callers only. */
+                    linear_app_user_id?: string;
+                    /** @description Linear organization id. System callers only. */
+                    linear_organization_id?: string;
+                    /** @description OAuth access token. System callers only. */
+                    linear_access_token?: string;
+                    /** @description OAuth refresh token. System callers only. */
                     linear_refresh_token?: string;
                     /**
                      * Format: date-time
-                     * @description Expiry of the access token.
+                     * @description Expiry of the access token. System callers only.
                      */
-                    linear_access_token_expires_at: string | null;
-                    /** @description Cached Linear organization/team metadata. */
+                    linear_access_token_expires_at?: string | null;
+                    /** @description Cached Linear organization/team metadata. System callers only; built from Linear for users. */
                     metadata?: {
                         organization: {
                             name: string;
@@ -23924,6 +24987,15 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description Linear rejected the OAuth code. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
             /** @description Forbidden. */
             403: {
                 headers: {
@@ -24495,26 +25567,36 @@ export interface operations {
             };
         };
     };
-    completeOnboarding: {
+    getOAuthAuthorizeUrl: {
         parameters: {
-            query?: never;
+            query: {
+                /** @description OAuth provider. */
+                provider: "slack" | "linear" | "jira" | "github";
+                /** @description The dashboard callback the provider returns to. */
+                redirect_uri: string;
+                /** @description CSRF state, echoed back to the callback. */
+                state: string;
+                /** @description Slack only: pins the install to a workspace, so re-auth updates it instead of showing a picker. */
+                team?: string;
+            };
             header?: never;
             path?: never;
             cookie?: never;
         };
-        requestBody?: {
-            content: {
-                "application/json": components["schemas"]["OnboardingCompleteRequest"];
-            };
-        };
+        requestBody?: never;
         responses: {
-            /** @description Created org and project. */
+            /** @description The authorize URL. */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["OnboardingCompleteResponse"];
+                    "application/json": {
+                        data: {
+                            /** @description The provider's authorize URL. */
+                            url: string;
+                        };
+                    };
                 };
             };
             /** @description Invalid request. */
@@ -24526,8 +25608,8 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description Caller is not a member of the given organisation. */
-            403: {
+            /** @description The provider's client ID is not configured. */
+            500: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -24537,15 +25619,57 @@ export interface operations {
             };
         };
     };
-    getOnboardingContext: {
+    completeOnboarding: {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        requestBody?: never;
-        responses: {
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["OnboardingCompleteRequest"];
+            };
+        };
+        responses: {
+            /** @description Created org and project. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["OnboardingCompleteResponse"];
+                };
+            };
+            /** @description Invalid request. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Caller is not a member of the given organisation. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    getOnboardingContext: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
             /** @description Onboarding context. */
             200: {
                 headers: {
@@ -25159,6 +26283,15 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description The user's email is not confirmed. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
         };
     };
     listPlanAssignments: {
@@ -25323,6 +26456,8 @@ export interface operations {
             query?: {
                 /** @description Usage month (YYYY-MM, UTC). Returns the plan in effect at the end of that month, or now for the current month. Defaults to now. */
                 month?: string;
+                /** @description Usage period key (YYYY-MM-DD, from `/api/billing/periods`). Returns the plan in effect at the end of that period, or now for the current period. */
+                period?: string;
             };
             header?: never;
             path?: never;
@@ -25339,7 +26474,7 @@ export interface operations {
                     "application/json": components["schemas"]["OrgPlanResponse"];
                 };
             };
-            /** @description Invalid month, or missing project scope. */
+            /** @description Invalid month or period, or missing project scope. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -25404,7 +26539,7 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description A plan with this key already exists. */
+            /** @description A plan with this key or Dodo product already exists. */
             409: {
                 headers: {
                     [name: string]: unknown;
@@ -27401,52 +28536,112 @@ export interface operations {
             };
         };
     };
-    listRunnerBackends: {
+    claimRunnerBackend: {
         parameters: {
-            query?: {
-                /** @description Only this organisation's backends. */
-                org_id?: number | null;
-            };
+            query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["ClaimRunnerBackendBody"];
+            };
+        };
         responses: {
-            /** @description The runner backends. */
+            /** @description The backend after the call. */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["RunnerBackendListResponse"];
+                    "application/json": components["schemas"]["ClaimRunnerBackendResponse"];
+                };
+            };
+            /** @description The stack's resources are not where Empirical expects. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description The stack is in a different account or region than the registration. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Unknown registration token. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description The registration was claimed by another stack. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description The registration link expired. */
+            410: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Empirical assumed the role but a check failed. */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Empirical cannot assume the role yet; retry. */
+            503: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
         };
     };
-    createRunnerBackend: {
+    getProjectRunnerBackend: {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        requestBody?: {
-            content: {
-                "application/json": components["schemas"]["CreateRunnerBackendBody"];
-            };
-        };
+        requestBody?: never;
         responses: {
-            /** @description The registered backend. */
+            /** @description The project's runner backend, or null. */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["RunnerBackendResponse"];
+                    "application/json": components["schemas"]["ProjectRunnerBackendDetailResponse"];
                 };
             };
-            /** @description Invalid registration. */
+            /** @description Missing or invalid project scope. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -27455,21 +28650,75 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description Project not found or not accessible. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
         };
     };
-    getRunnerBackend: {
+    removeProjectRunnerBackend: {
         parameters: {
             query?: never;
             header?: never;
             path: {
-                /** @description Runner backend ID. */
+                /** @description A runner backend of the project's organisation. */
                 id: number | null;
             };
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description The runner backend. */
+            /** @description The runner was removed. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["RemoveRunnerBackendResponse"];
+                };
+            };
+            /** @description Runner backend not found in this organisation. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description The runner is active or still used by a project. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    renameProjectRunnerBackend: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                /** @description A runner backend of the project's organisation. */
+                id: number | null;
+            };
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["RenameRunnerBackendBody"];
+            };
+        };
+        responses: {
+            /** @description The renamed runner. */
             200: {
                 headers: {
                     [name: string]: unknown;
@@ -27478,7 +28727,7 @@ export interface operations {
                     "application/json": components["schemas"]["RunnerBackendResponse"];
                 };
             };
-            /** @description Runner backend not found. */
+            /** @description Runner backend not found in this organisation. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -27489,12 +28738,12 @@ export interface operations {
             };
         };
     };
-    disableRunnerBackend: {
+    disconnectProjectRunnerBackend: {
         parameters: {
             query?: never;
             header?: never;
             path: {
-                /** @description Runner backend ID. */
+                /** @description A runner backend of the project's organisation. */
                 id: number | null;
             };
             cookie?: never;
@@ -27507,10 +28756,10 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["RunnerBackendResponse"];
+                    "application/json": components["schemas"]["DisconnectRunnerBackendResponse"];
                 };
             };
-            /** @description Runner backend not found. */
+            /** @description Runner backend not found in this organisation. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -27521,12 +28770,12 @@ export interface operations {
             };
         };
     };
-    verifyRunnerBackend: {
+    enableProjectRunnerBackend: {
         parameters: {
             query?: never;
             header?: never;
             path: {
-                /** @description Runner backend ID. */
+                /** @description A runner backend of the project's organisation. */
                 id: number | null;
             };
             cookie?: never;
@@ -27542,7 +28791,7 @@ export interface operations {
                     "application/json": components["schemas"]["RunnerBackendVerifyResponse"];
                 };
             };
-            /** @description Runner backend not found. */
+            /** @description Runner backend not found in this organisation. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -27551,27 +28800,39 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description The backend is not disabled, or its stack was deleted. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
         };
     };
-    getProjectRunnerBackend: {
+    createProjectRunnerBackendRegistration: {
         parameters: {
             query?: never;
             header?: never;
-            path?: never;
+            path: {
+                /** @description A runner backend of the project's organisation. */
+                id: number | null;
+            };
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description The project's runner backend, or null. */
+            /** @description The registration link. */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["ProjectRunnerBackendDetailResponse"];
+                    "application/json": components["schemas"]["RunnerBackendRegistrationResponse"];
                 };
             };
-            /** @description Missing or invalid project scope. */
+            /** @description The backend's region has no published template. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -27580,7 +28841,7 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description Project not found or not accessible. */
+            /** @description Runner backend not found in this organisation. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -27589,9 +28850,27 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description The backend is no longer pending. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description The published template could not be read. */
+            502: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
         };
     };
-    verifyProjectRunnerBackend: {
+    listProjectOrgRunnerBackends: {
         parameters: {
             query?: never;
             header?: never;
@@ -27600,13 +28879,13 @@ export interface operations {
         };
         requestBody?: never;
         responses: {
-            /** @description Every check, and the backend after them. */
+            /** @description The runner backends. */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["RunnerBackendVerifyResponse"];
+                    "application/json": components["schemas"]["OrgRunnerBackendListResponse"];
                 };
             };
             /** @description Missing or invalid project scope. */
@@ -27618,8 +28897,32 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description Project not found, or it runs on Empirical-hosted. */
-            404: {
+        };
+    };
+    setScopedProjectRunnerBackend: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["SetProjectRunnerBackendBody"];
+            };
+        };
+        responses: {
+            /** @description The project's backend. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ProjectRunnerBackendResponse"];
+                };
+            };
+            /** @description The backend is not active. */
+            400: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -27627,8 +28930,8 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description The runner backend is disabled. */
-            409: {
+            /** @description Runner backend not found in this organisation. */
+            404: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -27638,32 +28941,29 @@ export interface operations {
             };
         };
     };
-    setProjectRunnerBackend: {
+    setupProjectRunnerBackend: {
         parameters: {
             query?: never;
             header?: never;
-            path: {
-                /** @description Project ID. */
-                project_id: number | null;
-            };
+            path?: never;
             cookie?: never;
         };
         requestBody?: {
             content: {
-                "application/json": components["schemas"]["SetProjectRunnerBackendBody"];
+                "application/json": components["schemas"]["SetupRunnerBackendBody"];
             };
         };
         responses: {
-            /** @description The project's backend. */
+            /** @description The backend and its link. */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["ProjectRunnerBackendResponse"];
+                    "application/json": components["schemas"]["SetupRunnerBackendResponse"];
                 };
             };
-            /** @description The backend belongs to another org or is not active. */
+            /** @description The region has no published template. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -27672,7 +28972,54 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description Project or runner backend not found. */
+            /** @description A runner is already connected in that account and region, or a disconnected one's stack still exists. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description The published template could not be read. */
+            502: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    verifyProjectRunnerBackend: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Every check, and the backend after them. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["RunnerBackendVerifyResponse"];
+                };
+            };
+            /** @description Missing or invalid project scope. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Project not found, or it runs on Empirical-hosted. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -27681,6 +29028,15 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description The runner backend is disabled. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
         };
     };
     listSandboxSnapshots: {
@@ -28406,12 +29762,14 @@ export interface operations {
         requestBody?: {
             content: {
                 "application/json": {
-                    /** @description User ID to link the GitHub account to. */
-                    user_id: string;
-                    /** @description GitHub numeric user ID. */
-                    github_user_id: string;
-                    /** @description GitHub login/username. */
-                    github_username: string;
+                    /** @description OAuth code from GitHub's redirect to the reporter app callback. Required for a signed-in user, whose account is linked to the GitHub user who authorized it. */
+                    code?: string;
+                    /** @description User ID to link the GitHub account to. System callers only. */
+                    user_id?: string;
+                    /** @description GitHub numeric user ID. System callers only. */
+                    github_user_id?: string;
+                    /** @description GitHub login/username. System callers only. */
+                    github_username?: string;
                     /** @description GitHub display name. */
                     github_display_name?: string | null;
                     /** @description GitHub avatar URL. */
@@ -28440,6 +29798,15 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description GitHub rejected the OAuth code. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
         };
     };
     deleteMyGithubLink: {