@empiricalrun/playwright-utils 0.61.1 → 0.61.3

package/dist/generated/api-worker-openapi.d.ts

@@ -962,6 +962,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/slack/admin/scope-refresh": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * 🛡️ Complete a Slack scope refresh
+         * @description Exchanges the OAuth code from re-authorizing the Slack app on Empirical's own workspace, which applies newly requested scopes. The token is not stored. Super-admin only.
+         */
+        post: operations["refreshSlackAppScopes"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/slack/auth-test": {
         parameters: {
             query?: never;
@@ -997,7 +1017,7 @@ export interface paths {
         put?: never;
         /**
          * 🛡️ Create or update a Slack install
-         * @description Creates a Slack app install for the org and team, or updates the existing one.
+         * @description Creates a Slack app install for the org and team, or updates the existing one. A signed-in user sends the OAuth code and api-worker exchanges it; installs into Empirical's own workspace are not stored.
          */
         post: operations["upsertSlackInstallation"];
         delete?: never;
@@ -1973,8 +1993,8 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * 🛡️ Get the org's usage and cost for a month
-         * @description Org-wide usage across all of the scoped project's org projects, against the plan in effect: per-meter usage, overage so far, a month-end projection, and the usage limit.
+         * 🛡️ Get the org's usage and cost for a usage period
+         * @description Org-wide usage across all of the scoped project's org projects, against the plan in effect: per-meter usage, overage so far, a period-end projection, and the usage limit. The period is a UTC calendar month, or the billing cycle for an org on a live Dodo subscription.
          */
         get: operations["getBillingMonthSummary"];
         put?: never;
@@ -1985,6 +2005,46 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/billing/periods": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * 🛡️ List the org's usage periods
+         * @description The org's usage periods up to the current one, latest first: billing cycles back to the subscription start for an org on a live Dodo subscription, calendar months otherwise and before that.
+         */
+        get: operations["listBillingPeriods"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/billing/subscription/{subscription_id}/reconcile": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * 🛡️ 🧪 Compare a subscription's usage with Dodo's events
+         * @description Compares our usage rows with the usage events Dodo has for the subscription's customer in one billing cycle, matched by event id: per-meter totals, plus events missing from Dodo, Dodo events with no usage row, and events whose quantity changed. Read-only; sends nothing. Defaults to the current cycle; a past cycle is named by its end (its renewal date) and starts a month earlier unless cycle_start is given.
+         */
+        get: operations["reconcileSubscriptionUsage"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/billing/subscription/checkout": {
         parameters: {
             query?: never;
@@ -2005,6 +2065,66 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/billing/subscription/end": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * 🛡️ 🧪 End the org's plan now
+         * @description Ends the scoped project's org's Dodo subscription now, with no undo: sends Dodo the usage it is missing, then cancels the subscription, or pauses it when the cycle has usage beyond the plan's allowance (Dodo charges it on pausing; a cron cancels the subscription once that charge succeeds). The plan ends at once, and the org can subscribe again. Emails the org's members and billing contacts. For an active or past-due subscription; an on-hold one must pay first.
+         */
+        post: operations["endSubscription"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/billing/subscription/offer": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * 🛡️ 🧪 Get the plan the org can subscribe to
+         * @description Whether the scoped project's org can start a Dodo checkout now (same rules as the checkout endpoint), and the plan's terms if so. The billing page uses it to show its Continue to payment button.
+         */
+        get: operations["getSubscriptionOffer"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/billing/subscription/portal": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * 🛡️ 🧪 Open the org's Dodo billing portal
+         * @description Creates a Dodo customer portal session for the scoped project's org, where the customer updates their card and downloads Dodo's invoices. A new session per call; nothing is stored. For orgs that have subscribed through Dodo.
+         */
+        post: operations["createSubscriptionPortalSession"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/billing/usage-limit": {
         parameters: {
             query?: never;
@@ -2862,7 +2982,7 @@ export interface paths {
         put?: never;
         /**
          * ⚙️ Upsert a main App installation
-         * @description Records or updates a main App installation for an org.
+         * @description Records or updates a main App installation for an org the caller can access.
          */
         post: operations["upsertMainInstallation"];
         delete?: never;
@@ -3046,7 +3166,7 @@ export interface paths {
         put?: never;
         /**
          * ⚙️ Create a reporter installation
-         * @description Records a reporter App installation for an org.
+         * @description Records a reporter App installation for an org the caller can access.
          */
         post: operations["createReporterInstallation"];
         delete?: never;
@@ -3671,6 +3791,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/jira/events": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Receive a Jira webhook
+         * @description Receives a Jira webhook delivery, resolves the install and project, and ingests issues carrying the `empirical` label as Empirical requests.
+         */
+        post: operations["receiveJiraWebhook"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/jira/installations": {
         parameters: {
             query?: never;
@@ -3686,7 +3826,7 @@ export interface paths {
         put?: never;
         /**
          * ⚙️ Create or reauthorize a Jira installation
-         * @description Stores a Jira app installation, or reauthorizes the existing site while preserving mappings, and optionally registers its webhook.
+         * @description Stores a Jira app installation, or reauthorizes the existing site while preserving mappings, and optionally registers its webhook. A signed-in user sends the OAuth code and api-worker exchanges it.
          */
         post: operations["createJiraInstallation"];
         delete?: never;
@@ -3795,6 +3935,26 @@ export interface paths {
         patch: operations["updateJiraWebhookExpiresAt"];
         trace?: never;
     };
+    "/api/linear/events": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Receive a Linear webhook
+         * @description Receives a Linear webhook delivery, verified by its `linear-signature` header, and ingests labelled issues into the resolved project as Empirical requests.
+         */
+        post: operations["receiveLinearWebhook"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/linear/installations": {
         parameters: {
             query?: never;
@@ -3810,7 +3970,7 @@ export interface paths {
         put?: never;
         /**
          * ⚙️ Create a Linear installation
-         * @description Creates or reauthorizes a Linear installation and stores its OAuth tokens.
+         * @description Creates or reauthorizes a Linear installation and stores its OAuth tokens. A signed-in user sends the OAuth code and api-worker exchanges it.
          */
         post: operations["createLinearInstallation"];
         delete?: never;
@@ -4031,6 +4191,26 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/oauth/authorize-url": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * ⚙️ Get an OAuth authorize URL
+         * @description Builds the provider authorize URL (client ID and scopes) for connecting Slack, Linear, Jira or the GitHub reporter app. The caller keeps the state and redirects to the URL.
+         */
+        get: operations["getOAuthAuthorizeUrl"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/onboarding/complete": {
         parameters: {
             query?: never;
@@ -4314,7 +4494,7 @@ export interface paths {
         put?: never;
         /**
          * ⚙️ Resolve org membership for a signed-in user
-         * @description Grants super-admin to staff emails; for users with no org yet, accepts pending invites for the email and matches org email domains. Returns the user's memberships and super-admin flag. System-to-system callers only.
+         * @description Grants super-admin to staff emails; for users with no org yet, accepts pending invites for the email and matches org email domains. Returns the user's memberships and super-admin flag. A signed-in user resolves their own membership and needs a confirmed email; system callers name the user in the body.
          */
         post: operations["resolveMembership"];
         delete?: never;
@@ -4380,7 +4560,7 @@ export interface paths {
         };
         /**
          * 🛡️ Get the org's plan
-         * @description Returns whether the scoped project's org is on a plan (now, or during `month`), and the plan's terms when it is a shared plan.
+         * @description Returns whether the scoped project's org is on a plan (now, or during `month` or `period`), and the plan's terms when it is a shared plan.
          */
         get: operations["getOrgPlan"];
         put?: never;
@@ -5636,7 +5816,7 @@ export interface paths {
         put?: never;
         /**
          * ⚙️ Upsert a GitHub link
-         * @description Creates or updates the GitHub account link for the given user. Super-admin only.
+         * @description Creates or updates a GitHub account link. A signed-in user links their own account to the GitHub user who authorized `code`; system callers pass the user and profile directly.
          */
         post: operations["upsertGithubLink"];
         /**
@@ -6390,6 +6570,16 @@ export interface components {
                         overage_price_cents: number | null;
                     }[];
                 } | null;
+                /** @description The org's live Dodo subscription now, or null when it's billed by invoice or has none. */
+                subscription: {
+                    /**
+                     * @description `past_due` / `on_hold`: the last renewal payment failed and is being retried. A paused subscription, or one whose plan was ended (End plan) whatever its Dodo status, holds no plan, so `subscription` is null.
+                     * @enum {string}
+                     */
+                    status: "active" | "past_due" | "on_hold";
+                    /** @description When the subscription next renews (ISO 8601). */
+                    next_billing_date: string;
+                } | null;
             };
         };
         PlanAssignmentListResponse: {
@@ -6561,11 +6751,19 @@ export interface components {
         BillingMonthSummaryResponse: {
             /** @description Response payload. */
             data: {
-                /** @description Usage month, YYYY-MM (UTC). */
+                /** @description Usage month, YYYY-MM (UTC). For a billing cycle, the month it starts in. */
                 month: string;
+                /** @description The period's key (YYYY-MM-DD), to pass as `period`: the 1st for a calendar month, the scheduled start date for a billing cycle. */
+                period_key: string;
+                /**
+                 * @description `month`: a UTC calendar month. `cycle`: a Dodo billing cycle [previous_billing_date, next_billing_date).
+                 * @enum {string}
+                 */
+                period_kind: "month" | "cycle";
                 period_start: string;
                 /** @description Exclusive (ISO 8601). */
                 period_end: string;
+                /** @description Whether this is the current period (month or cycle). */
                 is_current_month: boolean;
                 /** @description The shared plan in effect; null for no plan or a custom contract. */
                 plan: {
@@ -6583,7 +6781,7 @@ export interface components {
                 }[];
                 overage_cents: number;
                 projected_overage_cents: number | null;
-                /** @description Overage of the previous usage month, as a guide when picking a limit. Current month only. */
+                /** @description Overage of the previous usage period, as a guide when picking a limit. Current period only. */
                 last_month_overage_cents: number | null;
                 usage_limit: components["schemas"]["UsageLimit"];
             };
@@ -6593,7 +6791,7 @@ export interface components {
             meter: "ai_credits" | "test_minutes";
             included_qty: number | null;
             overage_price_cents: number | null;
-            /** @description Units used so far this month. */
+            /** @description Units used so far this period. */
             used: number;
             /** @description Projected units at month end (trailing 7-day pace); null when too early to project. */
             projected: number | null;
@@ -6603,14 +6801,14 @@ export interface components {
         UsageLimit: {
             /** @description Whether the org's plan supports a usage limit (catalog plans with overage pricing). */
             available: boolean;
-            /** @description Most overage allowed per usage month, in cents of the plan currency. Null means no limit. */
+            /** @description Most overage allowed per usage period (calendar month, or Dodo billing cycle), in cents of the plan currency. Null means no limit. */
             cap_cents: number | null;
             /**
-             * @description `warning` at 80% of the limit (or, for a $0 limit, 80% of any allowance); `reached` when new work is paused.
+             * @description `warning` once the bill (plan + overage) reaches 80% of plan + cap, skipped when that is at or below the plan price (including a $0 limit); `reached` when new work is paused.
              * @enum {string}
              */
             status: "none" | "ok" | "warning" | "reached";
-            /** @description When the limit was reached this month (ISO 8601). */
+            /** @description When the limit was reached this period (ISO 8601). */
             reached_at: string | null;
             updated_at: string | null;
             /** @description Who made a change. */
@@ -6622,19 +6820,37 @@ export interface components {
                 name: string | null;
             } | null;
         };
+        BillingPeriodsResponse: {
+            /** @description Response payload. */
+            data: components["schemas"]["BillingPeriod"][];
+        };
+        BillingPeriod: {
+            /** @description Pass as `period` to the month summary (YYYY-MM-DD). */
+            key: string;
+            /**
+             * @description `month`: a UTC calendar month. `cycle`: a Dodo billing cycle [previous_billing_date, next_billing_date).
+             * @enum {string}
+             */
+            kind: "month" | "cycle";
+            /** @description Inclusive (ISO 8601). */
+            start: string;
+            /** @description Exclusive (ISO 8601). */
+            end: string;
+            is_current: boolean;
+        };
         UsageLimitResponse: {
             /** @description Response payload. */
             data: {
                 /** @description Whether the org's plan supports a usage limit (catalog plans with overage pricing). */
                 available: boolean;
-                /** @description Most overage allowed per usage month, in cents of the plan currency. Null means no limit. */
+                /** @description Most overage allowed per usage period (calendar month, or Dodo billing cycle), in cents of the plan currency. Null means no limit. */
                 cap_cents: number | null;
                 /**
-                 * @description `warning` at 80% of the limit (or, for a $0 limit, 80% of any allowance); `reached` when new work is paused.
+                 * @description `warning` once the bill (plan + overage) reaches 80% of plan + cap, skipped when that is at or below the plan price (including a $0 limit); `reached` when new work is paused.
                  * @enum {string}
                  */
                 status: "none" | "ok" | "warning" | "reached";
-                /** @description When the limit was reached this month (ISO 8601). */
+                /** @description When the limit was reached this period (ISO 8601). */
                 reached_at: string | null;
                 updated_at: string | null;
                 /** @description Who made a change. */
@@ -6675,6 +6891,91 @@ export interface components {
                 checkout_url: string;
             };
         };
+        SubscriptionOfferResponse: {
+            /** @description Response payload. */
+            data: {
+                /** @description Whether the org can subscribe through Dodo now. */
+                available: boolean;
+                /**
+                 * @description Why not, when `available` is false.
+                 * @enum {string|null}
+                 */
+                reason: "not_configured" | "no_org" | "inr" | "has_plan" | "no_plan" | null;
+                /** @description The plan checkout would subscribe to, when available. */
+                plan: {
+                    /** @description Plan name, e.g. `Managed`. */
+                    name: string;
+                    /** @description Currency of the prices below, e.g. `usd`. */
+                    currency: string;
+                    /** @description Monthly base price in cents of `currency`. */
+                    base_price_cents: number;
+                    /** @description Metered allowances and overage rates. */
+                    meters: {
+                        /** @description Meter key, e.g. `ai_credits` or `test_minutes`. */
+                        meter: string;
+                        /** @description Units included each month. */
+                        included_qty: number | null;
+                        /** @description Price per unit above the allowance, in cents of `currency`; may be fractional. */
+                        overage_price_cents: number | null;
+                    }[];
+                } | null;
+            };
+        };
+        SubscriptionPortalResponse: {
+            /** @description Response payload. */
+            data: {
+                /** @description Short-lived Dodo customer portal session: update the card, download invoices. */
+                portal_url: string;
+            };
+        };
+        SubscriptionEndResponse: {
+            /** @description Response payload. */
+            data: {
+                /**
+                 * @description What the subscription became in Dodo: `cancelled` when there was no usage beyond the plan's allowance; `paused` when there was, which Dodo charges on pausing (the subscription is cancelled once that charge succeeds). Either way the plan has ended.
+                 * @enum {string}
+                 */
+                status: "cancelled" | "paused";
+                /** @description Whether Dodo charges a final payment for this cycle's usage beyond the allowance. */
+                final_charge: boolean;
+            };
+        };
+        SubscriptionUsageReconcileResponse: {
+            /** @description Response payload. */
+            data: {
+                subscription_id: string;
+                cycle_start: string;
+                cycle_end: string;
+                meters: {
+                    ai_credits: {
+                        /** @description Our usage in the cycle. */
+                        ours: number;
+                        /** @description What Dodo's events in the cycle add up to. */
+                        dodo: number;
+                        our_events: number;
+                        dodo_events: number;
+                    };
+                    test_minutes: {
+                        /** @description Our usage in the cycle. */
+                        ours: number;
+                        /** @description What Dodo's events in the cycle add up to. */
+                        dodo: number;
+                        our_events: number;
+                        dodo_events: number;
+                    };
+                };
+                /** @description Event ids of our usage rows that Dodo has no event for. */
+                missing: string[];
+                /** @description Dodo event ids in the cycle with no usage row of ours. */
+                extra: string[];
+                /** @description Events whose quantity differs from our usage row's (Dodo keeps the first quantity sent). */
+                changed: {
+                    event_id: string;
+                    ours: number;
+                    dodo: number;
+                }[];
+            };
+        };
         ClaimRunnerBackendResponse: {
             /** @description Response payload. */
             data: {
@@ -8118,11 +8419,11 @@ export interface components {
         ResolveMembershipRequest: {
             /**
              * Format: email
-             * @description Verified email of the user.
+             * @description Verified email of the user. Required for system callers; ignored for a signed-in user, whose confirmed email is read server-side.
              */
-            email: string;
-            /** @description Supabase user id to grant membership to. */
-            user_id: string;
+            email?: string;
+            /** @description Supabase user id to grant membership to. Required for system callers; ignored for a signed-in user, who resolves their own. */
+            user_id?: string;
         };
         OrgUpdateResponse: {
             /** @description Response payload. */
@@ -9134,12 +9435,67 @@ export interface components {
             edited: number;
             deleted: number;
         };
-        MemoryResponse: {
+        MemoryWriteResponse: {
             /** @description Response payload. */
             data: {
                 memory: components["schemas"]["Memory"];
+                /** @description Memory write gate verdict for agent writes; null when the write was not classified. */
+                gate: {
+                    /**
+                     * @description `rejected` = classified as failure/incident state; `error` = classification failed and the write was not checked.
+                     * @enum {string}
+                     */
+                    decision: "accepted" | "rejected" | "error";
+                    /**
+                     * @description `shadow` saves regardless of the decision; `enforce` refuses rejected writes.
+                     * @enum {string}
+                     */
+                    mode: "shadow" | "enforce";
+                    /** @description True when the write was refused. */
+                    blocked: boolean;
+                    reason: string;
+                    model: string | null;
+                    vocabulary_version: number | null;
+                    retention: string | null;
+                    retention_confidence: number | null;
+                    /** @description Probability of the failure/incident retention class; the write is rejected at or above the gate's threshold. */
+                    failure_incident_probability: number | null;
+                    subject: string | null;
+                    role: string | null;
+                } | null;
+            };
+        };
+        MemoryWriteRejectedResponse: {
+            data: unknown;
+            error: {
+                /** @description Why the write was refused. */
+                message: string;
+                gate: components["schemas"]["MemoryWriteVerdict"];
             };
         };
+        MemoryWriteVerdict: {
+            /**
+             * @description `rejected` = classified as failure/incident state; `error` = classification failed and the write was not checked.
+             * @enum {string}
+             */
+            decision: "accepted" | "rejected" | "error";
+            /**
+             * @description `shadow` saves regardless of the decision; `enforce` refuses rejected writes.
+             * @enum {string}
+             */
+            mode: "shadow" | "enforce";
+            /** @description True when the write was refused. */
+            blocked: boolean;
+            reason: string;
+            model: string | null;
+            vocabulary_version: number | null;
+            retention: string | null;
+            retention_confidence: number | null;
+            /** @description Probability of the failure/incident retention class; the write is rejected at or above the gate's threshold. */
+            failure_incident_probability: number | null;
+            subject: string | null;
+            role: string | null;
+        };
         CreateMemoryRequest: {
             /** @description Memory content (markdown). */
             content: string;
@@ -9154,6 +9510,12 @@ export interface components {
             /** @description Source file path for file-sourced memories; unique within the project. */
             source_path?: string | null;
         };
+        MemoryResponse: {
+            /** @description Response payload. */
+            data: {
+                memory: components["schemas"]["Memory"];
+            };
+        };
         UpdateMemoryRequest: {
             /** @description Memory content (markdown). */
             content?: string;
@@ -9396,10 +9758,10 @@ export interface components {
             /** @description ISO 8601 creation timestamp. */
             created_at: string | null;
         };
-        SlackAppInstallMutationResponse: {
+        SlackAppInstallUpsertResponse: {
             /** @description Whether the write succeeded. */
             success: boolean;
-            /** @description The Slack app install. */
+            /** @description The Slack app install; null when the install was into Empirical's own workspace, which is not stored per org. */
             data: {
                 /** @description Slack app install ID. */
                 id: number;
@@ -9426,7 +9788,15 @@ export interface components {
                 team_url: string | null;
                 /** @description ISO 8601 creation timestamp. */
                 created_at: string | null;
-            };
+            } | null;
+            /** @description True when nothing was stored (Empirical's workspace). */
+            skipped?: boolean;
+        };
+        SlackScopeRefreshResponse: {
+            /** @description Whether the refresh succeeded. */
+            success: boolean;
+            /** @description Granted OAuth scopes (CSV). */
+            scope: string;
         };
         SlackAppInstallResponse: {
             /** @description Response payload. */
@@ -9615,6 +9985,26 @@ export interface components {
             /** @description Error message. */
             error: string;
         };
+        SlackRunStartThreadReplacedError: {
+            /** @description Error message. */
+            error: string;
+            /**
+             * @description Machine-readable reason for the rejection.
+             * @enum {string}
+             */
+            code: "run_start_thread_replaced";
+            /** @description Test run whose run-start notification was replaced. */
+            test_run_id: string;
+            /** @description The run's current notification thread in the same channel, or null while the final notification is still being posted. */
+            replacement: {
+                /** @description Slack channel ID. */
+                channel: string;
+                /** @description Root timestamp to reply to instead. */
+                thread_ts: string;
+                /** @description Registered physical Slack root ID. */
+                slack_thread_id: number;
+            } | null;
+        };
         SlackSupportedAction: {
             /**
              * @description Add a button that opens this pull request for review.
@@ -9632,6 +10022,38 @@ export interface components {
             /** @description Pull request number in the authenticated project's repository. */
             pr_number: number;
         };
+        SlackAppInstallMutationResponse: {
+            /** @description Whether the write succeeded. */
+            success: boolean;
+            /** @description The Slack app install. */
+            data: {
+                /** @description Slack app install ID. */
+                id: number;
+                /** @description Organisation ID. */
+                org_id: number;
+                /** @description Slack app ID. */
+                slack_app_id: string;
+                /** @description Authorizing Slack user ID. */
+                authed_user_id: string;
+                /** @description OAuth scopes (CSV). */
+                scope: string;
+                /** @description OAuth token type. */
+                token_type: string;
+                /** @description Bot user ID. */
+                bot_user_id: string;
+                /** @description Slack workspace (team) ID. */
+                team_id: string;
+                /** @description Slack workspace name. */
+                team_name: string;
+                /**
+                 * Format: uri
+                 * @description Slack workspace URL learned from auth.test.
+                 */
+                team_url: string | null;
+                /** @description ISO 8601 creation timestamp. */
+                created_at: string | null;
+            };
+        };
         ChatSessionUsersResponse: {
             /** @description Response payload. */
             data: components["schemas"]["ChatSessionUserDetail"][];
@@ -10508,22 +10930,29 @@ export interface components {
         CreateJiraInstallationRequest: {
             /** @description Organisation the installation belongs to. */
             org_id: number;
-            /** @description Atlassian cloud ID of the Jira site. */
-            jira_cloud_id: string;
+            /** @description OAuth code from Atlassian's redirect. Required for a signed-in user. */
+            code?: string;
             /**
              * Format: uri
-             * @description Base URL of the Jira site.
+             * @description Redirect URI the authorize request used; Atlassian requires it to match. Required with `code`.
              */
-            jira_site_url: string;
-            /** @description OAuth access token. */
-            jira_access_token: string;
-            /** @description OAuth refresh token. */
-            jira_refresh_token: string;
+            redirect_uri?: string;
+            /** @description Atlassian cloud ID. System callers only. */
+            jira_cloud_id?: string;
+            /**
+             * Format: uri
+             * @description Base URL of the Jira site. System callers only.
+             */
+            jira_site_url?: string;
+            /** @description OAuth access token. System callers only. */
+            jira_access_token?: string;
+            /** @description OAuth refresh token. System callers only. */
+            jira_refresh_token?: string;
             /**
              * Format: date-time
-             * @description Expiry timestamp of the access token.
+             * @description Expiry of the access token. System callers only.
              */
-            jira_access_token_expires_at: string | null;
+            jira_access_token_expires_at?: string | null;
             /** @description When true, register the Jira webhook after install. */
             register_webhook?: boolean;
         };
@@ -10597,6 +11026,9 @@ export interface components {
             /** @description Webhook expiry (ISO 8601), or null. */
             webhookExpiresAt: string | null;
         };
+        RequestIngestionProviderPayload: {
+            [key: string]: unknown;
+        };
         LinearInstallListResponse: {
             /** @description Installations for the organization. */
             data: components["schemas"]["LinearAppInstall"][];
@@ -13879,7 +14311,7 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description The organisation has an overdue invoice. */
+            /** @description Billing blocked: an overdue invoice, a failed renewal, no active plan, or the spend limit reached. */
             402: {
                 headers: {
                     [name: string]: unknown;
@@ -14127,7 +14559,7 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description The organisation has an overdue invoice. */
+            /** @description Billing blocked: an overdue invoice, a failed renewal, no active plan, or the spend limit reached. */
             402: {
                 headers: {
                     [name: string]: unknown;
@@ -16209,6 +16641,56 @@ export interface operations {
             };
         };
     };
+    refreshSlackAppScopes: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": {
+                    /** @description OAuth code from Slack's redirect. */
+                    code: string;
+                    /**
+                     * Format: uri
+                     * @description Redirect URI the authorize request used.
+                     */
+                    redirect_uri: string;
+                };
+            };
+        };
+        responses: {
+            /** @description The scopes were refreshed. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SlackScopeRefreshResponse"];
+                };
+            };
+            /** @description The code was for another workspace. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Slack rejected the OAuth code. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
     slackAuthTest: {
         parameters: {
             query?: never;
@@ -16306,22 +16788,29 @@ export interface operations {
                 "application/json": {
                     /** @description Organisation ID. */
                     org_id: number;
-                    /** @description Slack app ID. */
-                    slack_app_id: string;
-                    /** @description Authorizing Slack user ID. */
-                    authed_user_id: string;
-                    /** @description OAuth scopes (CSV). */
-                    scope: string;
-                    /** @description OAuth token type. */
-                    token_type: string;
-                    /** @description OAuth access token. */
-                    access_token: string;
-                    /** @description Bot user ID. */
-                    bot_user_id: string;
-                    /** @description Slack workspace (team) ID. */
-                    team_id: string;
-                    /** @description Slack workspace name. */
-                    team_name: string;
+                    /** @description OAuth code from Slack's redirect. Required for a signed-in user. */
+                    code?: string;
+                    /**
+                     * Format: uri
+                     * @description Redirect URI the authorize request used; Slack requires it to match. Required with `code`.
+                     */
+                    redirect_uri?: string;
+                    /** @description Slack app ID. System callers only. */
+                    slack_app_id?: string;
+                    /** @description Authorizing Slack user ID. System callers only. */
+                    authed_user_id?: string;
+                    /** @description OAuth scopes (CSV). System callers only. */
+                    scope?: string;
+                    /** @description OAuth token type. System callers only. */
+                    token_type?: string;
+                    /** @description OAuth access token. System callers only. */
+                    access_token?: string;
+                    /** @description Bot user ID. System callers only. */
+                    bot_user_id?: string;
+                    /** @description Slack workspace (team) ID. System callers only. */
+                    team_id?: string;
+                    /** @description Slack workspace name. System callers only. */
+                    team_name?: string;
                 };
             };
         };
@@ -16332,7 +16821,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["SlackAppInstallMutationResponse"];
+                    "application/json": components["schemas"]["SlackAppInstallUpsertResponse"];
                 };
             };
             /** @description Invalid request. */
@@ -16344,6 +16833,15 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description Slack rejected the OAuth code. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
             /** @description Forbidden. */
             403: {
                 headers: {
@@ -16932,6 +17430,15 @@ export interface operations {
                     "application/json": components["schemas"]["SlackMessageError"];
                 };
             };
+            /** @description The thread was a test run's run-start notification, which was deleted when the run's final notification was posted. Reply in `replacement` instead. */
+            410: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SlackRunStartThreadReplacedError"];
+                };
+            };
             /** @description Slack upstream error. */
             502: {
                 headers: {
@@ -19479,16 +19986,191 @@ export interface operations {
             };
         };
         responses: {
-            /** @description The API key was updated. */
+            /** @description The API key was updated. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ApiKeySuccessResponse"];
+                };
+            };
+            /** @description Invalid request. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description API key not found. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Failed to update the API key. */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    getBillingMonthSummary: {
+        parameters: {
+            query?: {
+                /** @description A UTC calendar month (YYYY-MM), for any org. Defaults to the current period. */
+                month?: string;
+                /** @description A usage period by key (YYYY-MM-DD, from `/api/billing/periods`): a calendar month, or a billing cycle for an org on a live Dodo subscription. Defaults to the current period. */
+                period?: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The month summary. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["BillingMonthSummaryResponse"];
+                };
+            };
+            /** @description Invalid month or period, or missing project scope. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description The project has no org. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    listBillingPeriods: {
+        parameters: {
+            query?: {
+                /** @description How many periods. Defaults to 2. */
+                count?: number;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Usage periods, latest first. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["BillingPeriodsResponse"];
+                };
+            };
+            /** @description Invalid query, or missing project scope. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description The project has no org. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    reconcileSubscriptionUsage: {
+        parameters: {
+            query?: {
+                cycle_end?: string;
+                cycle_start?: string;
+            };
+            header?: never;
+            path: {
+                /** @description Dodo subscription id. */
+                subscription_id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The reconciliation. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["SubscriptionUsageReconcileResponse"];
+                };
+            };
+            /** @description Payments are not configured, or an empty cycle. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description No such subscription. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
+    createSubscriptionCheckout: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The checkout. */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["ApiKeySuccessResponse"];
+                    "application/json": components["schemas"]["SubscriptionCheckoutResponse"];
                 };
             };
-            /** @description Invalid request. */
+            /** @description Payments not configured, INR org, no plan for sale, or no email for the Dodo customer. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -19497,7 +20179,7 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description API key not found. */
+            /** @description The project has no org. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -19506,8 +20188,8 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description Failed to update the API key. */
-            500: {
+            /** @description The org already has a plan or a live subscription. */
+            409: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -19517,28 +20199,25 @@ export interface operations {
             };
         };
     };
-    getBillingMonthSummary: {
+    endSubscription: {
         parameters: {
-            query?: {
-                /** @description Usage month (YYYY-MM, UTC). Defaults to the current month. */
-                month?: string;
-            };
+            query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
         requestBody?: never;
         responses: {
-            /** @description The month summary. */
+            /** @description The plan has ended. */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["BillingMonthSummaryResponse"];
+                    "application/json": components["schemas"]["SubscriptionEndResponse"];
                 };
             };
-            /** @description Invalid month, or missing project scope. */
+            /** @description Payments are not configured. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -19547,7 +20226,7 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description The project has no org. */
+            /** @description The org has no active subscription. */
             404: {
                 headers: {
                     [name: string]: unknown;
@@ -19556,9 +20235,18 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description The subscription is on hold (pay first), is already being ended, or can't be ended in Dodo right now. */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
         };
     };
-    createSubscriptionCheckout: {
+    getSubscriptionOffer: {
         parameters: {
             query?: never;
             header?: never;
@@ -19567,26 +20255,37 @@ export interface operations {
         };
         requestBody?: never;
         responses: {
-            /** @description The checkout. */
+            /** @description The offer. */
             200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["SubscriptionCheckoutResponse"];
+                    "application/json": components["schemas"]["SubscriptionOfferResponse"];
                 };
             };
-            /** @description Payments not configured, INR org, no plan for sale, or no email for the Dodo customer. */
-            400: {
+        };
+    };
+    createSubscriptionPortalSession: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The portal session. */
+            200: {
                 headers: {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["ErrorResponse"];
+                    "application/json": components["schemas"]["SubscriptionPortalResponse"];
                 };
             };
-            /** @description The project has no org. */
-            404: {
+            /** @description Payments are not configured. */
+            400: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -19594,8 +20293,8 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
-            /** @description The org already has a plan or a live subscription. */
-            409: {
+            /** @description The org has no Dodo customer. */
+            404: {
                 headers: {
                     [name: string]: unknown;
                 };
@@ -20431,7 +21130,7 @@ export interface operations {
                 "application/json": {
                     message: string;
                     /** @enum {string} */
-                    send_action: "steer" | "follow_up" | "stop";
+                    send_action: "steer" | "follow_up";
                     created_by?: string | null;
                     rpc_command_id?: string;
                     /** @description When the caller is an agent session, wake it the next time this session waits for input (one-shot). Defaults to true; pass false for a fire-and-forget message. Ignored for other callers. */
@@ -21902,6 +22601,15 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description Caller cannot access the organisation. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
         };
     };
     getMainInstallationMetadata: {
@@ -22323,6 +23031,15 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description Caller cannot access the organisation. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
         };
     };
     getReporterInstallationMetadata: {
@@ -23842,6 +24559,48 @@ export interface operations {
             };
         };
     };
+    receiveJiraWebhook: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["RequestIngestionProviderPayload"];
+            };
+        };
+        responses: {
+            /** @description Webhook processed. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["JiraWebhookResponse"];
+                };
+            };
+            /** @description Invalid webhook payload. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description No matching install or project. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
     listJiraInstallations: {
         parameters: {
             query: {
@@ -23914,6 +24673,15 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description Atlassian rejected the OAuth code. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
             /** @description Caller cannot access the organisation. */
             403: {
                 headers: {
@@ -24147,6 +24915,57 @@ export interface operations {
             };
         };
     };
+    receiveLinearWebhook: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["RequestIngestionProviderPayload"];
+            };
+        };
+        responses: {
+            /** @description Webhook accepted. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["LinearWebhookResponse"];
+                };
+            };
+            /** @description Invalid webhook payload. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description Invalid signature. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description No matching install or project. */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
     listLinearInstallations: {
         parameters: {
             query: {
@@ -24200,20 +25019,27 @@ export interface operations {
                 "application/json": {
                     /** @description Organization the installation belongs to. */
                     org_id: number;
-                    /** @description Linear app user (actor) id. */
-                    linear_app_user_id: string;
-                    /** @description Linear organization id. */
-                    linear_organization_id: string;
-                    /** @description OAuth access token for the Linear API. */
-                    linear_access_token: string;
-                    /** @description OAuth refresh token for the Linear API. */
+                    /** @description OAuth code from Linear's redirect. Required for a signed-in user. */
+                    code?: string;
+                    /**
+                     * Format: uri
+                     * @description Redirect URI the authorize request used; Linear requires it to match. Required with `code`.
+                     */
+                    redirect_uri?: string;
+                    /** @description Linear app user (actor) id. System callers only. */
+                    linear_app_user_id?: string;
+                    /** @description Linear organization id. System callers only. */
+                    linear_organization_id?: string;
+                    /** @description OAuth access token. System callers only. */
+                    linear_access_token?: string;
+                    /** @description OAuth refresh token. System callers only. */
                     linear_refresh_token?: string;
                     /**
                      * Format: date-time
-                     * @description Expiry of the access token.
+                     * @description Expiry of the access token. System callers only.
                      */
-                    linear_access_token_expires_at: string | null;
-                    /** @description Cached Linear organization/team metadata. */
+                    linear_access_token_expires_at?: string | null;
+                    /** @description Cached Linear organization/team metadata. System callers only; built from Linear for users. */
                     metadata?: {
                         organization: {
                             name: string;
@@ -24251,6 +25077,15 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description Linear rejected the OAuth code. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
             /** @description Forbidden. */
             403: {
                 headers: {
@@ -24588,7 +25423,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["MemoryResponse"];
+                    "application/json": components["schemas"]["MemoryWriteResponse"];
                 };
             };
             /** @description Invalid request or missing project scope. */
@@ -24618,6 +25453,15 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description Refused by the memory write gate: classified as failure/incident state. */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["MemoryWriteRejectedResponse"];
+                };
+            };
         };
     };
     getMemory: {
@@ -24706,7 +25550,7 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["MemoryResponse"];
+                    "application/json": components["schemas"]["MemoryWriteResponse"];
                 };
             };
             /** @description Memory not found or not accessible. */
@@ -24718,6 +25562,15 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description Refused by the memory write gate: classified as failure/incident state. */
+            422: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["MemoryWriteRejectedResponse"];
+                };
+            };
         };
     };
     listMemoryVersions: {
@@ -24822,6 +25675,58 @@ export interface operations {
             };
         };
     };
+    getOAuthAuthorizeUrl: {
+        parameters: {
+            query: {
+                /** @description OAuth provider. */
+                provider: "slack" | "linear" | "jira" | "github";
+                /** @description The dashboard callback the provider returns to. */
+                redirect_uri: string;
+                /** @description CSRF state, echoed back to the callback. */
+                state: string;
+                /** @description Slack only: pins the install to a workspace, so re-auth updates it instead of showing a picker. */
+                team?: string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description The authorize URL. */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": {
+                        data: {
+                            /** @description The provider's authorize URL. */
+                            url: string;
+                        };
+                    };
+                };
+            };
+            /** @description Invalid request. */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+            /** @description The provider's client ID is not configured. */
+            500: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
+        };
+    };
     completeOnboarding: {
         parameters: {
             query?: never;
@@ -25486,6 +26391,15 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description The user's email is not confirmed. */
+            403: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
         };
     };
     listPlanAssignments: {
@@ -25650,6 +26564,8 @@ export interface operations {
             query?: {
                 /** @description Usage month (YYYY-MM, UTC). Returns the plan in effect at the end of that month, or now for the current month. Defaults to now. */
                 month?: string;
+                /** @description Usage period key (YYYY-MM-DD, from `/api/billing/periods`). Returns the plan in effect at the end of that period, or now for the current period. */
+                period?: string;
             };
             header?: never;
             path?: never;
@@ -25666,7 +26582,7 @@ export interface operations {
                     "application/json": components["schemas"]["OrgPlanResponse"];
                 };
             };
-            /** @description Invalid month, or missing project scope. */
+            /** @description Invalid month or period, or missing project scope. */
             400: {
                 headers: {
                     [name: string]: unknown;
@@ -28954,12 +29870,14 @@ export interface operations {
         requestBody?: {
             content: {
                 "application/json": {
-                    /** @description User ID to link the GitHub account to. */
-                    user_id: string;
-                    /** @description GitHub numeric user ID. */
-                    github_user_id: string;
-                    /** @description GitHub login/username. */
-                    github_username: string;
+                    /** @description OAuth code from GitHub's redirect to the reporter app callback. Required for a signed-in user, whose account is linked to the GitHub user who authorized it. */
+                    code?: string;
+                    /** @description User ID to link the GitHub account to. System callers only. */
+                    user_id?: string;
+                    /** @description GitHub numeric user ID. System callers only. */
+                    github_user_id?: string;
+                    /** @description GitHub login/username. System callers only. */
+                    github_username?: string;
                     /** @description GitHub display name. */
                     github_display_name?: string | null;
                     /** @description GitHub avatar URL. */
@@ -28988,6 +29906,15 @@ export interface operations {
                     "application/json": components["schemas"]["ErrorResponse"];
                 };
             };
+            /** @description GitHub rejected the OAuth code. */
+            401: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["ErrorResponse"];
+                };
+            };
         };
     };
     deleteMyGithubLink: {