@primitivedotdev/sdk 1.19.0 → 1.21.0

package/dist/{operations.generated-CORS0UoM.js → operations.generated-BHSC87qb.js}

@@ -97,6 +97,10 @@ const openapiDocument = {
 			"name": "Memories",
 			"description": "Durable org-scoped or function-scoped JSON key-value storage for\nagents and functions. Keys are caller-defined. Function scope is\nalways addressed by the function id UUID, not by function name.\n"
 		},
+		{
+			"name": "Templates",
+			"description": "Browse approved Function templates, install deploy-mode templates, and\npoll install progress.\n"
+		},
 		{
 			"name": "Registries",
 			"description": "The Agent Registry: ownable directories of agents, addressable by a\nregistry-scoped handle. A registry's publish policy (owner_only, request,\nor open) decides whether a publish lists immediately or pends owner\napproval. An agent is defined once with a globally unique,\nreachability-verified address, then published into any registry under a\nhandle. Discovery reads (list, resolve, get) are public for public\nregistries; managing a registry and moderating requests use the owner's\nAPI key.\n"
@@ -2922,6 +2926,167 @@ const openapiDocument = {
 				"429": { "$ref": "#/components/responses/RateLimited" }
 			}
 		} },
+		"/templates": { "get": {
+			"operationId": "listTemplates",
+			"summary": "List function templates",
+			"description": "List approved Function templates available for browsing and\ninstallation. Results are cacheable and paginated with\n`data.next_cursor`.\n",
+			"tags": ["Templates"],
+			"security": [],
+			"parameters": [
+				{
+					"name": "q",
+					"in": "query",
+					"required": false,
+					"description": "Search templates by title, summary, or slug.",
+					"schema": {
+						"type": "string",
+						"minLength": 1
+					}
+				},
+				{
+					"name": "tag",
+					"in": "query",
+					"required": false,
+					"description": "Filter templates by an exact tag.",
+					"schema": {
+						"type": "string",
+						"minLength": 1
+					}
+				},
+				{
+					"name": "cursor",
+					"in": "query",
+					"required": false,
+					"description": "Cursor from a previous response `data.next_cursor` value.",
+					"schema": { "type": "string" }
+				},
+				{
+					"name": "limit",
+					"in": "query",
+					"required": false,
+					"description": "Maximum number of templates to return. The server caps this at 100.",
+					"schema": {
+						"type": "integer",
+						"minimum": 1,
+						"maximum": 100,
+						"default": 50
+					}
+				}
+			],
+			"responses": {
+				"200": {
+					"description": "Paginated template registry summaries",
+					"content": { "application/json": { "schema": { "allOf": [{ "$ref": "#/components/schemas/SuccessEnvelope" }, {
+						"type": "object",
+						"properties": { "data": { "$ref": "#/components/schemas/TemplateRegistryPage" } },
+						"required": ["data"]
+					}] } } }
+				},
+				"400": { "$ref": "#/components/responses/ValidationError" },
+				"429": { "$ref": "#/components/responses/RateLimited" }
+			}
+		} },
+		"/templates/{id}": { "get": {
+			"operationId": "getTemplate",
+			"summary": "Get a function template",
+			"description": "Fetch one approved Function template by slug, including its manifest\nsnapshot and README. The stored source files used for install are not\nreturned.\n",
+			"tags": ["Templates"],
+			"security": [],
+			"parameters": [{
+				"name": "id",
+				"in": "path",
+				"required": true,
+				"description": "Template slug from the template manifest.",
+				"schema": {
+					"type": "string",
+					"pattern": "^[a-z0-9][a-z0-9_-]{0,62}$"
+				}
+			}],
+			"responses": {
+				"200": {
+					"description": "Template registry detail",
+					"content": { "application/json": { "schema": { "allOf": [{ "$ref": "#/components/schemas/SuccessEnvelope" }, {
+						"type": "object",
+						"properties": { "data": { "$ref": "#/components/schemas/TemplateRegistryDetail" } },
+						"required": ["data"]
+					}] } } }
+				},
+				"400": { "$ref": "#/components/responses/ValidationError" },
+				"404": { "$ref": "#/components/responses/NotFound" },
+				"429": { "$ref": "#/components/responses/RateLimited" }
+			}
+		} },
+		"/templates/{id}/install": { "post": {
+			"operationId": "installTemplate",
+			"summary": "Install a function template",
+			"description": "Start a one-shot deploy of an approved deploy-mode Function template.\nThe response returns an install record immediately; poll\n`GET /templates/installs/{id}` for progress.\n",
+			"tags": ["Templates"],
+			"security": [{ "BearerAuth": [] }],
+			"parameters": [{
+				"name": "id",
+				"in": "path",
+				"required": true,
+				"description": "Template slug from the template manifest.",
+				"schema": {
+					"type": "string",
+					"pattern": "^[a-z0-9][a-z0-9_-]{0,62}$"
+				}
+			}],
+			"requestBody": {
+				"required": true,
+				"content": { "application/json": { "schema": { "$ref": "#/components/schemas/InstallTemplateBody" } } }
+			},
+			"responses": {
+				"201": {
+					"description": "Template install started",
+					"content": { "application/json": { "schema": { "allOf": [{ "$ref": "#/components/schemas/SuccessEnvelope" }, {
+						"type": "object",
+						"properties": { "data": { "$ref": "#/components/schemas/TemplateInstallStatus" } },
+						"required": ["data"]
+					}] } } }
+				},
+				"400": { "$ref": "#/components/responses/ValidationError" },
+				"401": { "$ref": "#/components/responses/Unauthorized" },
+				"403": { "$ref": "#/components/responses/Forbidden" },
+				"404": { "$ref": "#/components/responses/NotFound" },
+				"409": { "$ref": "#/components/responses/Conflict" },
+				"422": { "$ref": "#/components/responses/UnprocessableEntity" },
+				"429": { "$ref": "#/components/responses/RateLimited" }
+			}
+		} },
+		"/templates/installs/{id}": { "get": {
+			"operationId": "getTemplateInstall",
+			"summary": "Get template install status",
+			"description": "Fetch the current state of a template install. Reads may advance the\nself-test phase when a reply effect has been observed.\n",
+			"tags": ["Templates"],
+			"security": [{ "BearerAuth": [] }],
+			"parameters": [{
+				"name": "id",
+				"in": "path",
+				"required": true,
+				"description": "Template install UUID.",
+				"schema": {
+					"type": "string",
+					"format": "uuid",
+					"pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$"
+				}
+			}],
+			"responses": {
+				"200": {
+					"description": "Current template install status",
+					"content": { "application/json": { "schema": { "allOf": [{ "$ref": "#/components/schemas/SuccessEnvelope" }, {
+						"type": "object",
+						"properties": { "data": { "$ref": "#/components/schemas/TemplateInstallStatus" } },
+						"required": ["data"]
+					}] } } }
+				},
+				"400": { "$ref": "#/components/responses/ValidationError" },
+				"401": { "$ref": "#/components/responses/Unauthorized" },
+				"403": { "$ref": "#/components/responses/Forbidden" },
+				"404": { "$ref": "#/components/responses/NotFound" },
+				"429": { "$ref": "#/components/responses/RateLimited" }
+			}
+		} },
 		"/x402/payout-addresses": {
 			"post": {
 				"operationId": "registerPayoutAddress",
@@ -4592,6 +4757,16 @@ const openapiDocument = {
 									"org_not_accessible",
 									"feature_disabled",
 									"memory_conflict",
+									"template_not_installable",
+									"scaffold_only",
+									"invalid_variables",
+									"unknown_secrets",
+									"missing_secrets",
+									"no_inbound_domain",
+									"domain_cannot_send",
+									"address_taken",
+									"route_cap_reached",
+									"name_exhausted",
 									"developer_usage_credit_exhausted",
 									"no_payout_address",
 									"ownership_proof_failed",
@@ -6640,6 +6815,40 @@ const openapiDocument = {
 				},
 				"required": ["filename", "content_base64"]
 			},
+			"SendMailPayloadRef": {
+				"type": "object",
+				"additionalProperties": false,
+				"description": "A reference to an already-uploaded Primitive Payloads object, delivered as an attachment without inlining the bytes — the way to send an attachment larger than the inline cap. Upload the object via /v1/payloads (with a client-held CEK the server never sees), then reference it here.",
+				"properties": {
+					"root": {
+						"type": "string",
+						"pattern": "^[0-9a-f]{64}$",
+						"description": "The 64-char lowercase-hex Merkle root of a finalized payloads object."
+					},
+					"filename": {
+						"type": "string",
+						"minLength": 1,
+						"maxLength": 255,
+						"description": "Attachment filename presented to the recipient."
+					},
+					"content_type": {
+						"type": "string",
+						"minLength": 1,
+						"maxLength": 255,
+						"description": "Optional MIME content type."
+					},
+					"cek": {
+						"type": "string",
+						"pattern": "^[A-Za-z0-9_-]{1,128}$",
+						"description": "Base64url-encoded (unpadded) content-encryption key the recipient uses to decrypt. Travels with the email; the object store only ever holds ciphertext."
+					}
+				},
+				"required": [
+					"root",
+					"filename",
+					"cek"
+				]
+			},
 			"SendMailInput": {
 				"type": "object",
 				"additionalProperties": false,
@@ -6694,6 +6903,12 @@ const openapiDocument = {
 						"description": "Inline attachments. Send requests with attachments to https://api.primitive.dev/v1/send-mail. Combined raw decoded attachment bytes must be at most 31457280.",
 						"items": { "$ref": "#/components/schemas/SendMailAttachment" }
 					},
+					"payload_attachments": {
+						"type": "array",
+						"maxItems": 1,
+						"description": "Deliver an already-uploaded Primitive Payloads object as an attachment by reference, without inlining the bytes — the way to send attachments larger than the inline cap. Upload the object via /v1/payloads (client-held CEK), then reference it here. v1 supports at most one.",
+						"items": { "$ref": "#/components/schemas/SendMailPayloadRef" }
+					},
 					"wait": {
 						"type": "boolean",
 						"description": "When true, wait for the first downstream SMTP delivery outcome before returning."
@@ -9334,72 +9549,542 @@ const openapiDocument = {
 					"key",
 					"scope"
 				]
-			}
-		}
-	}
-};
-//#endregion
-//#region ../packages/api-core/src/openapi/operations.generated.ts
-const operationManifest = [
-	{
-		"binaryResponse": false,
-		"bodyRequired": false,
-		"command": "get-account",
-		"description": null,
-		"hasJsonBody": false,
-		"method": "GET",
-		"operationId": "getAccount",
-		"path": "/account",
-		"pathParams": [],
-		"queryParams": [],
-		"requestSchema": null,
-		"responseSchema": {
-			"type": "object",
-			"properties": {
-				"id": {
-					"type": "string",
-					"format": "uuid"
-				},
-				"email": { "type": "string" },
-				"plan": { "type": "string" },
-				"limits": {
-					"type": "object",
-					"description": "Plan-derived quota limits for an account.",
-					"properties": {
-						"storage_mb": { "type": "number" },
-						"send_per_hour": { "type": "number" },
-						"send_per_day": { "type": "number" },
-						"api_per_minute": { "type": "number" },
-						"webhooks_max_global": { "type": ["number", "null"] },
-						"webhooks_per_domain": { "type": "boolean" },
-						"filters_per_domain": { "type": "boolean" },
-						"spam_thresholds_per_domain": { "type": "boolean" }
+			},
+			"TemplateAuthor": {
+				"type": "object",
+				"additionalProperties": false,
+				"properties": {
+					"id": {
+						"type": "string",
+						"minLength": 1
 					},
-					"required": [
-						"storage_mb",
-						"send_per_hour",
-						"send_per_day",
-						"api_per_minute",
-						"webhooks_max_global",
-						"webhooks_per_domain",
-						"filters_per_domain",
-						"spam_thresholds_per_domain"
-					]
+					"name": {
+						"type": "string",
+						"minLength": 1
+					},
+					"url": {
+						"type": "string",
+						"format": "uri"
+					}
 				},
-				"entitlements": {
-					"type": "array",
-					"items": { "type": "string" },
-					"description": "Granted org entitlement keys (sorted). A headless caller reads its\ncapabilities here — e.g. an emailless agent seeing only\n[\"send_mail\", \"send_to_known_addresses\"] knows it is reply-only.\n"
+				"required": ["id", "name"]
+			},
+			"TemplateSource": { "oneOf": [{
+				"type": "object",
+				"additionalProperties": false,
+				"properties": {
+					"mode": {
+						"type": "string",
+						"const": "managed-build"
+					},
+					"dir": {
+						"type": "string",
+						"minLength": 1,
+						"default": "."
+					}
 				},
-				"managed_inbox_address": {
-					"type": ["string", "null"],
-					"description": "The managed inbox FQDN to reply as, or null if the org has no managed inbox."
+				"required": ["mode", "dir"]
+			}, {
+				"type": "object",
+				"additionalProperties": false,
+				"properties": {
+					"mode": {
+						"type": "string",
+						"const": "bundle"
+					},
+					"file": {
+						"type": "string",
+						"minLength": 1
+					}
 				},
-				"created_at": {
-					"type": "string",
-					"format": "date-time"
+				"required": ["mode", "file"]
+			}] },
+			"TemplateInstall": {
+				"type": "object",
+				"additionalProperties": false,
+				"properties": {
+					"mode": {
+						"type": "string",
+						"enum": ["deploy", "scaffold"]
+					},
+					"editFiles": {
+						"type": "array",
+						"items": {
+							"type": "string",
+							"minLength": 1
+						}
+					},
+					"reason": {
+						"type": "string",
+						"default": ""
+					}
 				},
-				"onboarding_completed": { "type": "boolean" },
+				"required": [
+					"mode",
+					"editFiles",
+					"reason"
+				]
+			},
+			"TemplateSecret": {
+				"type": "object",
+				"additionalProperties": false,
+				"properties": {
+					"key": {
+						"type": "string",
+						"pattern": "^[A-Z_][A-Z0-9_]*$"
+					},
+					"required": {
+						"type": "boolean",
+						"default": true
+					},
+					"description": { "type": "string" }
+				},
+				"required": ["key", "required"]
+			},
+			"TemplateSecretGroup": {
+				"type": "object",
+				"additionalProperties": false,
+				"properties": {
+					"keys": {
+						"type": "array",
+						"minItems": 2,
+						"items": {
+							"type": "string",
+							"pattern": "^[A-Z_][A-Z0-9_]*$"
+						}
+					},
+					"min": {
+						"type": "integer",
+						"minimum": 1,
+						"default": 1
+					},
+					"description": { "type": "string" }
+				},
+				"required": ["keys", "min"]
+			},
+			"TemplateVariableValidation": {
+				"type": "object",
+				"additionalProperties": false,
+				"properties": {
+					"pattern": {
+						"type": "string",
+						"minLength": 1
+					},
+					"maxLength": {
+						"type": "integer",
+						"minimum": 1
+					}
+				}
+			},
+			"TemplateVariable": {
+				"type": "object",
+				"additionalProperties": false,
+				"properties": {
+					"key": {
+						"type": "string",
+						"minLength": 1
+					},
+					"prompt": {
+						"type": "string",
+						"minLength": 1
+					},
+					"default": { "type": "string" },
+					"file": {
+						"type": "string",
+						"minLength": 1
+					},
+					"type": {
+						"type": "string",
+						"enum": [
+							"string",
+							"select",
+							"url",
+							"email"
+						],
+						"default": "string"
+					},
+					"options": {
+						"type": "array",
+						"items": {
+							"type": "string",
+							"minLength": 1
+						}
+					},
+					"validation": { "$ref": "#/components/schemas/TemplateVariableValidation" }
+				},
+				"required": [
+					"key",
+					"prompt",
+					"type"
+				]
+			},
+			"TemplateSetup": {
+				"type": "object",
+				"additionalProperties": false,
+				"properties": {
+					"agent": {
+						"type": "string",
+						"minLength": 1
+					},
+					"prompt": {
+						"type": "string",
+						"minLength": 1
+					},
+					"produces": {
+						"type": "array",
+						"items": {
+							"type": "string",
+							"minLength": 1
+						}
+					}
+				},
+				"required": [
+					"agent",
+					"prompt",
+					"produces"
+				]
+			},
+			"TemplateManifest": {
+				"type": "object",
+				"additionalProperties": false,
+				"properties": {
+					"schemaVersion": {
+						"type": "integer",
+						"const": 1
+					},
+					"id": {
+						"type": "string",
+						"pattern": "^[a-z0-9][a-z0-9_-]{0,62}$",
+						"description": "Stable template slug from the manifest."
+					},
+					"title": {
+						"type": "string",
+						"minLength": 1
+					},
+					"summary": {
+						"type": "string",
+						"minLength": 1
+					},
+					"description": { "type": "string" },
+					"author": { "$ref": "#/components/schemas/TemplateAuthor" },
+					"tags": {
+						"type": "array",
+						"items": {
+							"type": "string",
+							"minLength": 1
+						}
+					},
+					"source": { "$ref": "#/components/schemas/TemplateSource" },
+					"install": { "$ref": "#/components/schemas/TemplateInstall" },
+					"secrets": {
+						"type": "array",
+						"items": { "$ref": "#/components/schemas/TemplateSecret" }
+					},
+					"secretGroups": {
+						"type": "array",
+						"items": { "$ref": "#/components/schemas/TemplateSecretGroup" }
+					},
+					"variables": {
+						"type": "array",
+						"items": { "$ref": "#/components/schemas/TemplateVariable" }
+					},
+					"setup": { "$ref": "#/components/schemas/TemplateSetup" },
+					"postInstall": { "type": "string" }
+				},
+				"required": [
+					"schemaVersion",
+					"id",
+					"title",
+					"summary",
+					"author",
+					"tags",
+					"source",
+					"install",
+					"secrets",
+					"secretGroups",
+					"variables"
+				]
+			},
+			"TemplateRegistryStatus": {
+				"type": "string",
+				"enum": [
+					"pending",
+					"approved",
+					"rejected"
+				]
+			},
+			"TemplateRegistrySummary": {
+				"type": "object",
+				"properties": {
+					"id": {
+						"type": "string",
+						"format": "uuid"
+					},
+					"slug": {
+						"type": "string",
+						"pattern": "^[a-z0-9][a-z0-9_-]{0,62}$",
+						"description": "Stable template slug used in template URLs and install commands."
+					},
+					"title": { "type": "string" },
+					"summary": { "type": "string" },
+					"author": { "$ref": "#/components/schemas/TemplateAuthor" },
+					"tags": {
+						"type": "array",
+						"items": { "type": "string" }
+					},
+					"verified": { "type": "boolean" },
+					"install_count": {
+						"type": "integer",
+						"minimum": 0
+					},
+					"github_repo": {
+						"type": "string",
+						"pattern": "^[A-Za-z0-9-]+/[A-Za-z0-9_.-]+$",
+						"description": "GitHub repository in owner/repo form."
+					},
+					"created_at": {
+						"type": "string",
+						"format": "date-time"
+					},
+					"updated_at": {
+						"type": "string",
+						"format": "date-time"
+					}
+				},
+				"required": [
+					"id",
+					"slug",
+					"title",
+					"summary",
+					"author",
+					"tags",
+					"verified",
+					"install_count",
+					"github_repo",
+					"created_at",
+					"updated_at"
+				]
+			},
+			"TemplateRegistryDetail": {
+				"type": "object",
+				"properties": {
+					"id": {
+						"type": "string",
+						"format": "uuid"
+					},
+					"slug": {
+						"type": "string",
+						"pattern": "^[a-z0-9][a-z0-9_-]{0,62}$",
+						"description": "Stable template slug used in template URLs and install commands."
+					},
+					"title": { "type": "string" },
+					"summary": { "type": "string" },
+					"author": { "$ref": "#/components/schemas/TemplateAuthor" },
+					"tags": {
+						"type": "array",
+						"items": { "type": "string" }
+					},
+					"verified": { "type": "boolean" },
+					"install_count": {
+						"type": "integer",
+						"minimum": 0
+					},
+					"github_repo": {
+						"type": "string",
+						"pattern": "^[A-Za-z0-9-]+/[A-Za-z0-9_.-]+$",
+						"description": "GitHub repository in owner/repo form."
+					},
+					"created_at": {
+						"type": "string",
+						"format": "date-time"
+					},
+					"updated_at": {
+						"type": "string",
+						"format": "date-time"
+					},
+					"description": { "type": ["string", "null"] },
+					"github_sha": { "type": "string" },
+					"github_path": { "type": ["string", "null"] },
+					"manifest": { "$ref": "#/components/schemas/TemplateManifest" },
+					"readme": { "type": ["string", "null"] },
+					"status": { "$ref": "#/components/schemas/TemplateRegistryStatus" }
+				},
+				"required": [
+					"id",
+					"slug",
+					"title",
+					"summary",
+					"author",
+					"tags",
+					"verified",
+					"install_count",
+					"github_repo",
+					"created_at",
+					"updated_at",
+					"description",
+					"github_sha",
+					"github_path",
+					"manifest",
+					"readme",
+					"status"
+				]
+			},
+			"TemplateRegistryPage": {
+				"type": "object",
+				"properties": {
+					"items": {
+						"type": "array",
+						"items": { "$ref": "#/components/schemas/TemplateRegistrySummary" }
+					},
+					"next_cursor": {
+						"type": ["string", "null"],
+						"description": "Cursor to pass as the next `cursor` query value, or null when there are no more templates."
+					}
+				},
+				"required": ["items", "next_cursor"]
+			},
+			"InstallTemplateBody": {
+				"type": "object",
+				"additionalProperties": false,
+				"properties": {
+					"address": {
+						"type": "string",
+						"pattern": "^[a-z0-9][a-z0-9._-]{0,63}$",
+						"description": "Localpart to claim on the selected inbound domain. Defaults to the template slug."
+					},
+					"domain": {
+						"type": "string",
+						"minLength": 3,
+						"description": "Org domain name to claim the address on. Defaults to the org's newest active domain."
+					},
+					"variables": {
+						"type": "object",
+						"additionalProperties": { "type": "string" },
+						"description": "Template variable values keyed by manifest variable key."
+					},
+					"secrets": {
+						"type": "object",
+						"additionalProperties": { "type": "string" },
+						"description": "Secret values keyed by manifest secret key."
+					}
+				}
+			},
+			"TemplateInstallState": {
+				"type": "string",
+				"enum": [
+					"deploying",
+					"connecting",
+					"bound",
+					"tested",
+					"deploy_failed",
+					"bind_failed",
+					"test_failed"
+				]
+			},
+			"TemplateInstallStatus": {
+				"type": "object",
+				"properties": {
+					"id": {
+						"type": "string",
+						"format": "uuid"
+					},
+					"template_slug": {
+						"type": "string",
+						"pattern": "^[a-z0-9][a-z0-9_-]{0,62}$",
+						"description": "Template slug for this install."
+					},
+					"state": { "$ref": "#/components/schemas/TemplateInstallState" },
+					"address": { "type": ["string", "null"] },
+					"function_id": {
+						"type": ["string", "null"],
+						"format": "uuid"
+					},
+					"error": { "type": ["string", "null"] },
+					"created_at": {
+						"type": "string",
+						"format": "date-time"
+					},
+					"updated_at": {
+						"type": "string",
+						"format": "date-time"
+					}
+				},
+				"required": [
+					"id",
+					"template_slug",
+					"state",
+					"address",
+					"function_id",
+					"error",
+					"created_at",
+					"updated_at"
+				]
+			}
+		}
+	}
+};
+//#endregion
+//#region ../packages/api-core/src/openapi/operations.generated.ts
+const operationManifest = [
+	{
+		"binaryResponse": false,
+		"bodyRequired": false,
+		"command": "get-account",
+		"description": null,
+		"hasJsonBody": false,
+		"method": "GET",
+		"operationId": "getAccount",
+		"path": "/account",
+		"pathParams": [],
+		"queryParams": [],
+		"requestSchema": null,
+		"responseSchema": {
+			"type": "object",
+			"properties": {
+				"id": {
+					"type": "string",
+					"format": "uuid"
+				},
+				"email": { "type": "string" },
+				"plan": { "type": "string" },
+				"limits": {
+					"type": "object",
+					"description": "Plan-derived quota limits for an account.",
+					"properties": {
+						"storage_mb": { "type": "number" },
+						"send_per_hour": { "type": "number" },
+						"send_per_day": { "type": "number" },
+						"api_per_minute": { "type": "number" },
+						"webhooks_max_global": { "type": ["number", "null"] },
+						"webhooks_per_domain": { "type": "boolean" },
+						"filters_per_domain": { "type": "boolean" },
+						"spam_thresholds_per_domain": { "type": "boolean" }
+					},
+					"required": [
+						"storage_mb",
+						"send_per_hour",
+						"send_per_day",
+						"api_per_minute",
+						"webhooks_max_global",
+						"webhooks_per_domain",
+						"filters_per_domain",
+						"spam_thresholds_per_domain"
+					]
+				},
+				"entitlements": {
+					"type": "array",
+					"items": { "type": "string" },
+					"description": "Granted org entitlement keys (sorted). A headless caller reads its\ncapabilities here — e.g. an emailless agent seeing only\n[\"send_mail\", \"send_to_known_addresses\"] knows it is reply-only.\n"
+				},
+				"managed_inbox_address": {
+					"type": ["string", "null"],
+					"description": "The managed inbox FQDN to reply as, or null if the org has no managed inbox."
+				},
+				"created_at": {
+					"type": "string",
+					"format": "date-time"
+				},
+				"onboarding_completed": { "type": "boolean" },
 				"onboarding_step": { "type": ["string", "null"] },
 				"stripe_subscription_status": { "type": ["string", "null"] },
 				"subscription_current_period_end": {
@@ -18577,7 +19262,245 @@ const operationManifest = [
 						"required": ["filename", "content_base64"]
 					}
 				}
-			}
+			}
+		},
+		"responseSchema": {
+			"type": "object",
+			"properties": {
+				"id": {
+					"type": "string",
+					"description": "Persisted sent-email attempt ID."
+				},
+				"status": {
+					"type": "string",
+					"description": "Lifecycle status of a sent_emails row. Possible values:\n\n  - `queued`: pre-call INSERT; the outbound agent has not\n    yet replied.\n  - `submitted_to_agent`: agent accepted; `queue_id` is set.\n  - `agent_failed`: agent rejected; `error_code` and\n    `error_message` carry the reason.\n  - `gate_denied`: a recipient-scope gate denied the send;\n    the agent was never called. The `gates` array carries\n    the denial detail. /send-mail returns 403 in this case\n    so callers see the denial synchronously; /sent-emails\n    additionally records the row for historical lookup,\n    which is when this status appears in a listing.\n  - `unknown`: terminal indeterminate; the on-box log\n    poller couldn't classify the receiver's response.\n  - `delivered` / `bounced` / `deferred` / `wait_timeout`:\n    terminal delivery outcomes (see DeliveryStatus).\n",
+					"enum": [
+						"queued",
+						"submitted_to_agent",
+						"agent_failed",
+						"gate_denied",
+						"unknown",
+						"delivered",
+						"bounced",
+						"deferred",
+						"wait_timeout"
+					]
+				},
+				"from": {
+					"type": "string",
+					"description": "Bare from-address actually written on the wire. Echoed\non every success branch so callers can confirm what\nwent out, particularly useful for the /emails/{id}/reply\npath where `from` is server-derived from the inbound's\nrecipient when the caller doesn't override.\n\nFor sends where the caller passed a from-header that\nincluded a display name (e.g. `\"Acme Support\" <support@acme.test>`),\nthis field is the parsed bare address (`support@acme.test`).\nThe display name was sent on the wire intact; this field\njust makes the address easy to compare against allowlists.\n"
+				},
+				"queue_id": {
+					"type": ["string", "null"],
+					"description": "Message identifier assigned by Primitive's OUTBOUND relay\n(the box that signs your mail and submits it to the\nreceiving MTA). NOT the receiver's queue id.\n\nThe receiver may also report its own queue id in\n`smtp_response_text` (e.g. `\"250 2.0.0 Ok: queued as\n99D111927CDA\"` from a Postfix receiver). Those two ids\nrefer to different mail systems and are NOT comparable.\nTreat `queue_id` as Primitive-internal and the\nreceiver's id as remote-system-internal.\n\nNull on rows that never reached the relay (queued,\ngate_denied, agent_failed before signing).\n"
+				},
+				"accepted": {
+					"type": "array",
+					"items": { "type": "string" },
+					"description": "Recipient addresses accepted by the relay."
+				},
+				"rejected": {
+					"type": "array",
+					"items": { "type": "string" },
+					"description": "Recipient addresses rejected by the relay."
+				},
+				"client_idempotency_key": {
+					"type": "string",
+					"description": "Effective idempotency key used for this send."
+				},
+				"request_id": {
+					"type": "string",
+					"description": "Server-issued request identifier for support and tracing."
+				},
+				"content_hash": {
+					"type": "string",
+					"description": "Stable hash of the canonical send payload."
+				},
+				"delivery_status": {
+					"type": "string",
+					"description": "Narrower enum covering only the four terminal delivery\noutcomes returned to a synchronous `wait: true` send.\n\nOn the SendMailResult shape, `delivery_status` is always\nequal to `status` whenever both are present (i.e. on\nterminal-state replays and live wait=true responses).\nThe two fields exist so callers that want to type-narrow\non \"this is a delivery outcome\" can pattern-match against\nthe four-value enum without handling the broader\nSentEmailStatus value set (which also covers `queued`,\n`submitted_to_agent`, `agent_failed`, `gate_denied`,\n`unknown`).\n\nOn async-mode and pre-terminal responses, `delivery_status`\nis absent and only `status` is populated. Use `status` if\nyou want a single field that's always present.\n",
+					"enum": [
+						"delivered",
+						"bounced",
+						"deferred",
+						"wait_timeout"
+					]
+				},
+				"smtp_response_code": {
+					"type": ["integer", "null"],
+					"description": "SMTP response code from the first downstream delivery outcome when wait is true."
+				},
+				"smtp_response_text": {
+					"type": "string",
+					"description": "SMTP response text from the first downstream delivery outcome when wait is true."
+				},
+				"idempotent_replay": {
+					"type": "boolean",
+					"description": "True when the response replays a previously-recorded send\nkeyed by `client_idempotency_key` (same key, same canonical\npayload). False on a fresh send and on gate-denied\nresponses. Lets callers branch on cache state without\ndiffing fields.\n"
+				}
+			},
+			"required": [
+				"id",
+				"status",
+				"from",
+				"queue_id",
+				"accepted",
+				"rejected",
+				"client_idempotency_key",
+				"request_id",
+				"content_hash",
+				"idempotent_replay"
+			]
+		},
+		"sdkName": "replyToEmail",
+		"summary": "Reply to an inbound email",
+		"tag": "Sending",
+		"tagCommand": "sending"
+	},
+	{
+		"binaryResponse": false,
+		"bodyRequired": true,
+		"command": "send-email",
+		"description": "Sends an outbound email through Primitive's outbound relay. By default\nthe request returns once the relay accepts the message for delivery.\nSet `wait: true` to wait for the first downstream SMTP delivery outcome.\n\n**Host routing.** /send-mail is served by the canonical API host\n(`https://api.primitive.dev/v1`) so the request body can carry\ninline attachments up to ~30 MiB raw. The legacy dashboard\ncompatibility host (`https://www.primitive.dev/api/v1`) also accepts\n/send-mail, but Vercel request body limits apply before proxying.\nThe typed SDKs route /send-mail to the canonical API host\nautomatically.\n",
+		"hasJsonBody": true,
+		"method": "POST",
+		"operationId": "sendEmail",
+		"path": "/send-mail",
+		"pathParams": [],
+		"queryParams": [],
+		"requestSchema": {
+			"type": "object",
+			"additionalProperties": false,
+			"properties": {
+				"from": {
+					"type": "string",
+					"minLength": 3,
+					"maxLength": 998,
+					"description": "RFC 5322 From header. The sender domain must be a verified outbound domain for your organization."
+				},
+				"to": {
+					"type": "string",
+					"minLength": 3,
+					"maxLength": 320,
+					"description": "Recipient address. Recipient eligibility depends on your account's outbound entitlements."
+				},
+				"subject": {
+					"type": "string",
+					"minLength": 1,
+					"maxLength": 998,
+					"description": "Subject line for the outbound message"
+				},
+				"body_text": {
+					"type": "string",
+					"description": "Plain-text message body. At least one of body_text or body_html is required. The combined UTF-8 byte length of body_text and body_html must be at most 262144 bytes."
+				},
+				"body_html": {
+					"type": "string",
+					"description": "HTML message body. At least one of body_text or body_html is required. The combined UTF-8 byte length of body_text and body_html must be at most 262144 bytes."
+				},
+				"in_reply_to": {
+					"type": "string",
+					"minLength": 1,
+					"maxLength": 998,
+					"pattern": "^[^\\x00-\\x1F\\x7F]+$",
+					"description": "Message-ID of the direct parent email when sending a threaded reply."
+				},
+				"references": {
+					"type": "array",
+					"maxItems": 100,
+					"description": "Full ordered message-id chain for the thread.",
+					"items": {
+						"type": "string",
+						"minLength": 1,
+						"maxLength": 998,
+						"pattern": "^[^\\x00-\\x1F\\x7F]+$"
+					}
+				},
+				"attachments": {
+					"type": "array",
+					"maxItems": 100,
+					"description": "Inline attachments. Send requests with attachments to https://api.primitive.dev/v1/send-mail. Combined raw decoded attachment bytes must be at most 31457280.",
+					"items": {
+						"type": "object",
+						"additionalProperties": false,
+						"properties": {
+							"filename": {
+								"type": "string",
+								"minLength": 1,
+								"maxLength": 255,
+								"description": "Attachment filename. Control characters are rejected."
+							},
+							"content_type": {
+								"type": "string",
+								"minLength": 1,
+								"maxLength": 255,
+								"description": "Optional MIME content type. Control characters are rejected."
+							},
+							"content_base64": {
+								"type": "string",
+								"minLength": 1,
+								"maxLength": 44040192,
+								"description": "Base64-encoded attachment bytes."
+							}
+						},
+						"required": ["filename", "content_base64"]
+					}
+				},
+				"payload_attachments": {
+					"type": "array",
+					"maxItems": 1,
+					"description": "Deliver an already-uploaded Primitive Payloads object as an attachment by reference, without inlining the bytes — the way to send attachments larger than the inline cap. Upload the object via /v1/payloads (client-held CEK), then reference it here. v1 supports at most one.",
+					"items": {
+						"type": "object",
+						"additionalProperties": false,
+						"description": "A reference to an already-uploaded Primitive Payloads object, delivered as an attachment without inlining the bytes — the way to send an attachment larger than the inline cap. Upload the object via /v1/payloads (with a client-held CEK the server never sees), then reference it here.",
+						"properties": {
+							"root": {
+								"type": "string",
+								"pattern": "^[0-9a-f]{64}$",
+								"description": "The 64-char lowercase-hex Merkle root of a finalized payloads object."
+							},
+							"filename": {
+								"type": "string",
+								"minLength": 1,
+								"maxLength": 255,
+								"description": "Attachment filename presented to the recipient."
+							},
+							"content_type": {
+								"type": "string",
+								"minLength": 1,
+								"maxLength": 255,
+								"description": "Optional MIME content type."
+							},
+							"cek": {
+								"type": "string",
+								"pattern": "^[A-Za-z0-9_-]{1,128}$",
+								"description": "Base64url-encoded (unpadded) content-encryption key the recipient uses to decrypt. Travels with the email; the object store only ever holds ciphertext."
+							}
+						},
+						"required": [
+							"root",
+							"filename",
+							"cek"
+						]
+					}
+				},
+				"wait": {
+					"type": "boolean",
+					"description": "When true, wait for the first downstream SMTP delivery outcome before returning."
+				},
+				"wait_timeout_ms": {
+					"type": "integer",
+					"minimum": 1e3,
+					"maximum": 3e4,
+					"description": "Maximum time to wait for a delivery outcome when wait is true. Defaults to 30000."
+				}
+			},
+			"required": [
+				"from",
+				"to",
+				"subject"
+			]
 		},
 		"responseSchema": {
 			"type": "object",
@@ -18667,209 +19590,671 @@ const operationManifest = [
 				"idempotent_replay"
 			]
 		},
-		"sdkName": "replyToEmail",
-		"summary": "Reply to an inbound email",
+		"sdkName": "sendEmail",
+		"summary": "Send outbound email",
 		"tag": "Sending",
 		"tagCommand": "sending"
 	},
 	{
 		"binaryResponse": false,
-		"bodyRequired": true,
-		"command": "send-email",
-		"description": "Sends an outbound email through Primitive's outbound relay. By default\nthe request returns once the relay accepts the message for delivery.\nSet `wait: true` to wait for the first downstream SMTP delivery outcome.\n\n**Host routing.** /send-mail is served by the canonical API host\n(`https://api.primitive.dev/v1`) so the request body can carry\ninline attachments up to ~30 MiB raw. The legacy dashboard\ncompatibility host (`https://www.primitive.dev/api/v1`) also accepts\n/send-mail, but Vercel request body limits apply before proxying.\nThe typed SDKs route /send-mail to the canonical API host\nautomatically.\n",
-		"hasJsonBody": true,
-		"method": "POST",
-		"operationId": "sendEmail",
-		"path": "/send-mail",
-		"pathParams": [],
+		"bodyRequired": false,
+		"command": "get-template",
+		"description": "Fetch one approved Function template by slug, including its manifest\nsnapshot and README. The stored source files used for install are not\nreturned.\n",
+		"hasJsonBody": false,
+		"method": "GET",
+		"operationId": "getTemplate",
+		"path": "/templates/{id}",
+		"pathParams": [{
+			"description": "Template slug from the template manifest.",
+			"enum": null,
+			"name": "id",
+			"required": true,
+			"type": "string"
+		}],
 		"queryParams": [],
-		"requestSchema": {
+		"requestSchema": null,
+		"responseSchema": {
 			"type": "object",
-			"additionalProperties": false,
 			"properties": {
-				"from": {
+				"id": {
 					"type": "string",
-					"minLength": 3,
-					"maxLength": 998,
-					"description": "RFC 5322 From header. The sender domain must be a verified outbound domain for your organization."
+					"format": "uuid"
 				},
-				"to": {
+				"slug": {
 					"type": "string",
-					"minLength": 3,
-					"maxLength": 320,
-					"description": "Recipient address. Recipient eligibility depends on your account's outbound entitlements."
+					"pattern": "^[a-z0-9][a-z0-9_-]{0,62}$",
+					"description": "Stable template slug used in template URLs and install commands."
 				},
-				"subject": {
-					"type": "string",
-					"minLength": 1,
-					"maxLength": 998,
-					"description": "Subject line for the outbound message"
+				"title": { "type": "string" },
+				"summary": { "type": "string" },
+				"author": {
+					"type": "object",
+					"additionalProperties": false,
+					"properties": {
+						"id": {
+							"type": "string",
+							"minLength": 1
+						},
+						"name": {
+							"type": "string",
+							"minLength": 1
+						},
+						"url": {
+							"type": "string",
+							"format": "uri"
+						}
+					},
+					"required": ["id", "name"]
 				},
-				"body_text": {
-					"type": "string",
-					"description": "Plain-text message body. At least one of body_text or body_html is required. The combined UTF-8 byte length of body_text and body_html must be at most 262144 bytes."
+				"tags": {
+					"type": "array",
+					"items": { "type": "string" }
 				},
-				"body_html": {
+				"verified": { "type": "boolean" },
+				"install_count": {
+					"type": "integer",
+					"minimum": 0
+				},
+				"github_repo": {
 					"type": "string",
-					"description": "HTML message body. At least one of body_text or body_html is required. The combined UTF-8 byte length of body_text and body_html must be at most 262144 bytes."
+					"pattern": "^[A-Za-z0-9-]+/[A-Za-z0-9_.-]+$",
+					"description": "GitHub repository in owner/repo form."
 				},
-				"in_reply_to": {
+				"created_at": {
 					"type": "string",
-					"minLength": 1,
-					"maxLength": 998,
-					"pattern": "^[^\\x00-\\x1F\\x7F]+$",
-					"description": "Message-ID of the direct parent email when sending a threaded reply."
+					"format": "date-time"
 				},
-				"references": {
-					"type": "array",
-					"maxItems": 100,
-					"description": "Full ordered message-id chain for the thread.",
-					"items": {
-						"type": "string",
-						"minLength": 1,
-						"maxLength": 998,
-						"pattern": "^[^\\x00-\\x1F\\x7F]+$"
-					}
+				"updated_at": {
+					"type": "string",
+					"format": "date-time"
 				},
-				"attachments": {
-					"type": "array",
-					"maxItems": 100,
-					"description": "Inline attachments. Send requests with attachments to https://api.primitive.dev/v1/send-mail. Combined raw decoded attachment bytes must be at most 31457280.",
-					"items": {
-						"type": "object",
-						"additionalProperties": false,
-						"properties": {
-							"filename": {
-								"type": "string",
-								"minLength": 1,
-								"maxLength": 255,
-								"description": "Attachment filename. Control characters are rejected."
+				"description": { "type": ["string", "null"] },
+				"github_sha": { "type": "string" },
+				"github_path": { "type": ["string", "null"] },
+				"manifest": {
+					"type": "object",
+					"additionalProperties": false,
+					"properties": {
+						"schemaVersion": {
+							"type": "integer",
+							"const": 1
+						},
+						"id": {
+							"type": "string",
+							"pattern": "^[a-z0-9][a-z0-9_-]{0,62}$",
+							"description": "Stable template slug from the manifest."
+						},
+						"title": {
+							"type": "string",
+							"minLength": 1
+						},
+						"summary": {
+							"type": "string",
+							"minLength": 1
+						},
+						"description": { "type": "string" },
+						"author": {
+							"type": "object",
+							"additionalProperties": false,
+							"properties": {
+								"id": {
+									"type": "string",
+									"minLength": 1
+								},
+								"name": {
+									"type": "string",
+									"minLength": 1
+								},
+								"url": {
+									"type": "string",
+									"format": "uri"
+								}
 							},
-							"content_type": {
+							"required": ["id", "name"]
+						},
+						"tags": {
+							"type": "array",
+							"items": {
 								"type": "string",
-								"minLength": 1,
-								"maxLength": 255,
-								"description": "Optional MIME content type. Control characters are rejected."
+								"minLength": 1
+							}
+						},
+						"source": { "oneOf": [{
+							"type": "object",
+							"additionalProperties": false,
+							"properties": {
+								"mode": {
+									"type": "string",
+									"const": "managed-build"
+								},
+								"dir": {
+									"type": "string",
+									"minLength": 1,
+									"default": "."
+								}
 							},
-							"content_base64": {
-								"type": "string",
-								"minLength": 1,
-								"maxLength": 44040192,
-								"description": "Base64-encoded attachment bytes."
+							"required": ["mode", "dir"]
+						}, {
+							"type": "object",
+							"additionalProperties": false,
+							"properties": {
+								"mode": {
+									"type": "string",
+									"const": "bundle"
+								},
+								"file": {
+									"type": "string",
+									"minLength": 1
+								}
+							},
+							"required": ["mode", "file"]
+						}] },
+						"install": {
+							"type": "object",
+							"additionalProperties": false,
+							"properties": {
+								"mode": {
+									"type": "string",
+									"enum": ["deploy", "scaffold"]
+								},
+								"editFiles": {
+									"type": "array",
+									"items": {
+										"type": "string",
+										"minLength": 1
+									}
+								},
+								"reason": {
+									"type": "string",
+									"default": ""
+								}
+							},
+							"required": [
+								"mode",
+								"editFiles",
+								"reason"
+							]
+						},
+						"secrets": {
+							"type": "array",
+							"items": {
+								"type": "object",
+								"additionalProperties": false,
+								"properties": {
+									"key": {
+										"type": "string",
+										"pattern": "^[A-Z_][A-Z0-9_]*$"
+									},
+									"required": {
+										"type": "boolean",
+										"default": true
+									},
+									"description": { "type": "string" }
+								},
+								"required": ["key", "required"]
 							}
 						},
-						"required": ["filename", "content_base64"]
-					}
-				},
-				"wait": {
-					"type": "boolean",
-					"description": "When true, wait for the first downstream SMTP delivery outcome before returning."
-				},
-				"wait_timeout_ms": {
-					"type": "integer",
-					"minimum": 1e3,
-					"maximum": 3e4,
-					"description": "Maximum time to wait for a delivery outcome when wait is true. Defaults to 30000."
+						"secretGroups": {
+							"type": "array",
+							"items": {
+								"type": "object",
+								"additionalProperties": false,
+								"properties": {
+									"keys": {
+										"type": "array",
+										"minItems": 2,
+										"items": {
+											"type": "string",
+											"pattern": "^[A-Z_][A-Z0-9_]*$"
+										}
+									},
+									"min": {
+										"type": "integer",
+										"minimum": 1,
+										"default": 1
+									},
+									"description": { "type": "string" }
+								},
+								"required": ["keys", "min"]
+							}
+						},
+						"variables": {
+							"type": "array",
+							"items": {
+								"type": "object",
+								"additionalProperties": false,
+								"properties": {
+									"key": {
+										"type": "string",
+										"minLength": 1
+									},
+									"prompt": {
+										"type": "string",
+										"minLength": 1
+									},
+									"default": { "type": "string" },
+									"file": {
+										"type": "string",
+										"minLength": 1
+									},
+									"type": {
+										"type": "string",
+										"enum": [
+											"string",
+											"select",
+											"url",
+											"email"
+										],
+										"default": "string"
+									},
+									"options": {
+										"type": "array",
+										"items": {
+											"type": "string",
+											"minLength": 1
+										}
+									},
+									"validation": {
+										"type": "object",
+										"additionalProperties": false,
+										"properties": {
+											"pattern": {
+												"type": "string",
+												"minLength": 1
+											},
+											"maxLength": {
+												"type": "integer",
+												"minimum": 1
+											}
+										}
+									}
+								},
+								"required": [
+									"key",
+									"prompt",
+									"type"
+								]
+							}
+						},
+						"setup": {
+							"type": "object",
+							"additionalProperties": false,
+							"properties": {
+								"agent": {
+									"type": "string",
+									"minLength": 1
+								},
+								"prompt": {
+									"type": "string",
+									"minLength": 1
+								},
+								"produces": {
+									"type": "array",
+									"items": {
+										"type": "string",
+										"minLength": 1
+									}
+								}
+							},
+							"required": [
+								"agent",
+								"prompt",
+								"produces"
+							]
+						},
+						"postInstall": { "type": "string" }
+					},
+					"required": [
+						"schemaVersion",
+						"id",
+						"title",
+						"summary",
+						"author",
+						"tags",
+						"source",
+						"install",
+						"secrets",
+						"secretGroups",
+						"variables"
+					]
+				},
+				"readme": { "type": ["string", "null"] },
+				"status": {
+					"type": "string",
+					"enum": [
+						"pending",
+						"approved",
+						"rejected"
+					]
 				}
 			},
 			"required": [
-				"from",
-				"to",
-				"subject"
+				"id",
+				"slug",
+				"title",
+				"summary",
+				"author",
+				"tags",
+				"verified",
+				"install_count",
+				"github_repo",
+				"created_at",
+				"updated_at",
+				"description",
+				"github_sha",
+				"github_path",
+				"manifest",
+				"readme",
+				"status"
 			]
 		},
+		"sdkName": "getTemplate",
+		"summary": "Get a function template",
+		"tag": "Templates",
+		"tagCommand": "templates"
+	},
+	{
+		"binaryResponse": false,
+		"bodyRequired": false,
+		"command": "get-template-install",
+		"description": "Fetch the current state of a template install. Reads may advance the\nself-test phase when a reply effect has been observed.\n",
+		"hasJsonBody": false,
+		"method": "GET",
+		"operationId": "getTemplateInstall",
+		"path": "/templates/installs/{id}",
+		"pathParams": [{
+			"description": "Template install UUID.",
+			"enum": null,
+			"name": "id",
+			"required": true,
+			"type": "string"
+		}],
+		"queryParams": [],
+		"requestSchema": null,
 		"responseSchema": {
 			"type": "object",
 			"properties": {
 				"id": {
 					"type": "string",
-					"description": "Persisted sent-email attempt ID."
+					"format": "uuid"
 				},
-				"status": {
+				"template_slug": {
 					"type": "string",
-					"description": "Lifecycle status of a sent_emails row. Possible values:\n\n  - `queued`: pre-call INSERT; the outbound agent has not\n    yet replied.\n  - `submitted_to_agent`: agent accepted; `queue_id` is set.\n  - `agent_failed`: agent rejected; `error_code` and\n    `error_message` carry the reason.\n  - `gate_denied`: a recipient-scope gate denied the send;\n    the agent was never called. The `gates` array carries\n    the denial detail. /send-mail returns 403 in this case\n    so callers see the denial synchronously; /sent-emails\n    additionally records the row for historical lookup,\n    which is when this status appears in a listing.\n  - `unknown`: terminal indeterminate; the on-box log\n    poller couldn't classify the receiver's response.\n  - `delivered` / `bounced` / `deferred` / `wait_timeout`:\n    terminal delivery outcomes (see DeliveryStatus).\n",
-					"enum": [
-						"queued",
-						"submitted_to_agent",
-						"agent_failed",
-						"gate_denied",
-						"unknown",
-						"delivered",
-						"bounced",
-						"deferred",
-						"wait_timeout"
-					]
+					"pattern": "^[a-z0-9][a-z0-9_-]{0,62}$",
+					"description": "Template slug for this install."
 				},
-				"from": {
+				"state": {
 					"type": "string",
-					"description": "Bare from-address actually written on the wire. Echoed\non every success branch so callers can confirm what\nwent out, particularly useful for the /emails/{id}/reply\npath where `from` is server-derived from the inbound's\nrecipient when the caller doesn't override.\n\nFor sends where the caller passed a from-header that\nincluded a display name (e.g. `\"Acme Support\" <support@acme.test>`),\nthis field is the parsed bare address (`support@acme.test`).\nThe display name was sent on the wire intact; this field\njust makes the address easy to compare against allowlists.\n"
+					"enum": [
+						"deploying",
+						"connecting",
+						"bound",
+						"tested",
+						"deploy_failed",
+						"bind_failed",
+						"test_failed"
+					]
 				},
-				"queue_id": {
+				"address": { "type": ["string", "null"] },
+				"function_id": {
 					"type": ["string", "null"],
-					"description": "Message identifier assigned by Primitive's OUTBOUND relay\n(the box that signs your mail and submits it to the\nreceiving MTA). NOT the receiver's queue id.\n\nThe receiver may also report its own queue id in\n`smtp_response_text` (e.g. `\"250 2.0.0 Ok: queued as\n99D111927CDA\"` from a Postfix receiver). Those two ids\nrefer to different mail systems and are NOT comparable.\nTreat `queue_id` as Primitive-internal and the\nreceiver's id as remote-system-internal.\n\nNull on rows that never reached the relay (queued,\ngate_denied, agent_failed before signing).\n"
+					"format": "uuid"
 				},
-				"accepted": {
-					"type": "array",
-					"items": { "type": "string" },
-					"description": "Recipient addresses accepted by the relay."
+				"error": { "type": ["string", "null"] },
+				"created_at": {
+					"type": "string",
+					"format": "date-time"
 				},
-				"rejected": {
-					"type": "array",
-					"items": { "type": "string" },
-					"description": "Recipient addresses rejected by the relay."
+				"updated_at": {
+					"type": "string",
+					"format": "date-time"
+				}
+			},
+			"required": [
+				"id",
+				"template_slug",
+				"state",
+				"address",
+				"function_id",
+				"error",
+				"created_at",
+				"updated_at"
+			]
+		},
+		"sdkName": "getTemplateInstall",
+		"summary": "Get template install status",
+		"tag": "Templates",
+		"tagCommand": "templates"
+	},
+	{
+		"binaryResponse": false,
+		"bodyRequired": true,
+		"command": "install-template",
+		"description": "Start a one-shot deploy of an approved deploy-mode Function template.\nThe response returns an install record immediately; poll\n`GET /templates/installs/{id}` for progress.\n",
+		"hasJsonBody": true,
+		"method": "POST",
+		"operationId": "installTemplate",
+		"path": "/templates/{id}/install",
+		"pathParams": [{
+			"description": "Template slug from the template manifest.",
+			"enum": null,
+			"name": "id",
+			"required": true,
+			"type": "string"
+		}],
+		"queryParams": [],
+		"requestSchema": {
+			"type": "object",
+			"additionalProperties": false,
+			"properties": {
+				"address": {
+					"type": "string",
+					"pattern": "^[a-z0-9][a-z0-9._-]{0,63}$",
+					"description": "Localpart to claim on the selected inbound domain. Defaults to the template slug."
 				},
-				"client_idempotency_key": {
+				"domain": {
 					"type": "string",
-					"description": "Effective idempotency key used for this send."
+					"minLength": 3,
+					"description": "Org domain name to claim the address on. Defaults to the org's newest active domain."
 				},
-				"request_id": {
+				"variables": {
+					"type": "object",
+					"additionalProperties": { "type": "string" },
+					"description": "Template variable values keyed by manifest variable key."
+				},
+				"secrets": {
+					"type": "object",
+					"additionalProperties": { "type": "string" },
+					"description": "Secret values keyed by manifest secret key."
+				}
+			}
+		},
+		"responseSchema": {
+			"type": "object",
+			"properties": {
+				"id": {
 					"type": "string",
-					"description": "Server-issued request identifier for support and tracing."
+					"format": "uuid"
 				},
-				"content_hash": {
+				"template_slug": {
 					"type": "string",
-					"description": "Stable hash of the canonical send payload."
+					"pattern": "^[a-z0-9][a-z0-9_-]{0,62}$",
+					"description": "Template slug for this install."
 				},
-				"delivery_status": {
+				"state": {
 					"type": "string",
-					"description": "Narrower enum covering only the four terminal delivery\noutcomes returned to a synchronous `wait: true` send.\n\nOn the SendMailResult shape, `delivery_status` is always\nequal to `status` whenever both are present (i.e. on\nterminal-state replays and live wait=true responses).\nThe two fields exist so callers that want to type-narrow\non \"this is a delivery outcome\" can pattern-match against\nthe four-value enum without handling the broader\nSentEmailStatus value set (which also covers `queued`,\n`submitted_to_agent`, `agent_failed`, `gate_denied`,\n`unknown`).\n\nOn async-mode and pre-terminal responses, `delivery_status`\nis absent and only `status` is populated. Use `status` if\nyou want a single field that's always present.\n",
 					"enum": [
-						"delivered",
-						"bounced",
-						"deferred",
-						"wait_timeout"
+						"deploying",
+						"connecting",
+						"bound",
+						"tested",
+						"deploy_failed",
+						"bind_failed",
+						"test_failed"
 					]
 				},
-				"smtp_response_code": {
-					"type": ["integer", "null"],
-					"description": "SMTP response code from the first downstream delivery outcome when wait is true."
+				"address": { "type": ["string", "null"] },
+				"function_id": {
+					"type": ["string", "null"],
+					"format": "uuid"
 				},
-				"smtp_response_text": {
+				"error": { "type": ["string", "null"] },
+				"created_at": {
 					"type": "string",
-					"description": "SMTP response text from the first downstream delivery outcome when wait is true."
+					"format": "date-time"
 				},
-				"idempotent_replay": {
-					"type": "boolean",
-					"description": "True when the response replays a previously-recorded send\nkeyed by `client_idempotency_key` (same key, same canonical\npayload). False on a fresh send and on gate-denied\nresponses. Lets callers branch on cache state without\ndiffing fields.\n"
+				"updated_at": {
+					"type": "string",
+					"format": "date-time"
 				}
 			},
 			"required": [
 				"id",
-				"status",
-				"from",
-				"queue_id",
-				"accepted",
-				"rejected",
-				"client_idempotency_key",
-				"request_id",
-				"content_hash",
-				"idempotent_replay"
+				"template_slug",
+				"state",
+				"address",
+				"function_id",
+				"error",
+				"created_at",
+				"updated_at"
 			]
 		},
-		"sdkName": "sendEmail",
-		"summary": "Send outbound email",
-		"tag": "Sending",
-		"tagCommand": "sending"
+		"sdkName": "installTemplate",
+		"summary": "Install a function template",
+		"tag": "Templates",
+		"tagCommand": "templates"
+	},
+	{
+		"binaryResponse": false,
+		"bodyRequired": false,
+		"command": "list-templates",
+		"description": "List approved Function templates available for browsing and\ninstallation. Results are cacheable and paginated with\n`data.next_cursor`.\n",
+		"hasJsonBody": false,
+		"method": "GET",
+		"operationId": "listTemplates",
+		"path": "/templates",
+		"pathParams": [],
+		"queryParams": [
+			{
+				"description": "Search templates by title, summary, or slug.",
+				"enum": null,
+				"name": "q",
+				"required": false,
+				"type": "string"
+			},
+			{
+				"description": "Filter templates by an exact tag.",
+				"enum": null,
+				"name": "tag",
+				"required": false,
+				"type": "string"
+			},
+			{
+				"description": "Cursor from a previous response `data.next_cursor` value.",
+				"enum": null,
+				"name": "cursor",
+				"required": false,
+				"type": "string"
+			},
+			{
+				"default": 50,
+				"description": "Maximum number of templates to return. The server caps this at 100.",
+				"enum": null,
+				"maximum": 100,
+				"minimum": 1,
+				"name": "limit",
+				"required": false,
+				"type": "integer"
+			}
+		],
+		"requestSchema": null,
+		"responseSchema": {
+			"type": "object",
+			"properties": {
+				"items": {
+					"type": "array",
+					"items": {
+						"type": "object",
+						"properties": {
+							"id": {
+								"type": "string",
+								"format": "uuid"
+							},
+							"slug": {
+								"type": "string",
+								"pattern": "^[a-z0-9][a-z0-9_-]{0,62}$",
+								"description": "Stable template slug used in template URLs and install commands."
+							},
+							"title": { "type": "string" },
+							"summary": { "type": "string" },
+							"author": {
+								"type": "object",
+								"additionalProperties": false,
+								"properties": {
+									"id": {
+										"type": "string",
+										"minLength": 1
+									},
+									"name": {
+										"type": "string",
+										"minLength": 1
+									},
+									"url": {
+										"type": "string",
+										"format": "uri"
+									}
+								},
+								"required": ["id", "name"]
+							},
+							"tags": {
+								"type": "array",
+								"items": { "type": "string" }
+							},
+							"verified": { "type": "boolean" },
+							"install_count": {
+								"type": "integer",
+								"minimum": 0
+							},
+							"github_repo": {
+								"type": "string",
+								"pattern": "^[A-Za-z0-9-]+/[A-Za-z0-9_.-]+$",
+								"description": "GitHub repository in owner/repo form."
+							},
+							"created_at": {
+								"type": "string",
+								"format": "date-time"
+							},
+							"updated_at": {
+								"type": "string",
+								"format": "date-time"
+							}
+						},
+						"required": [
+							"id",
+							"slug",
+							"title",
+							"summary",
+							"author",
+							"tags",
+							"verified",
+							"install_count",
+							"github_repo",
+							"created_at",
+							"updated_at"
+						]
+					}
+				},
+				"next_cursor": {
+					"type": ["string", "null"],
+					"description": "Cursor to pass as the next `cursor` query value, or null when there are no more templates."
+				}
+			},
+			"required": ["items", "next_cursor"]
+		},
+		"sdkName": "listTemplates",
+		"summary": "List function templates",
+		"tag": "Templates",
+		"tagCommand": "templates"
 	},
 	{
 		"binaryResponse": false,