@typeship-ax/cli 0.10.0 → 0.20.0

package/src/types.ts

@@ -1,5 +1,5 @@
 // typeship — API types.
-// Generated by typeship — https://typeship.dev — do not edit by hand.
+// Generated by typeship — https://typeship.dev
 
 /** Unique identifier for a project. */
 export type ProjectId = string;
@@ -38,13 +38,15 @@ export type PublicationId = string;
 
 /**
  * Generator implementation selected by a Target. This is configuration, not identity; several
- * Targets may use the same generator.
+ * Targets may use the same generator. cli is the TypeScript CLI; go-cli is the native Go CLI, a
+ * distinct product that imports one exact paired Go SDK module rather than a client of its own.
  */
 export const GeneratorKind = {
   TYPESCRIPT_SDK: "typescript-sdk",
   PYTHON_SDK: "python-sdk",
   GO_SDK: "go-sdk",
   CLI: "cli",
+  GO_CLI: "go-cli",
   MCP: "mcp",
 } as const;
 export type GeneratorKind = (typeof GeneratorKind)[keyof typeof GeneratorKind];
@@ -58,7 +60,7 @@ export interface UrlDefinitionInput {
   url: string;
   /**
    * Request headers for a protected URL. Sent on the document GET and GraphQL introspection POST,
-   * never returned or retained by stateless generation.
+   * never returned or retained by one-shot generation.
    */
   headers?: Record<string, string>;
 }
@@ -78,15 +80,49 @@ export interface InlineDefinitionInput {
   inline: string;
 }
 
-/** A Definition for stateless generation, provided as exactly one URL or inline entrypoint. */
+/** A Definition for one-shot generation, provided as exactly one URL or inline entrypoint. */
 export type DefinitionInput = UrlDefinitionInput | InlineDefinitionInput;
 
 /** Response shape for DefinitionInput. */
 export type DefinitionInputRead = UrlDefinitionInputRead | InlineDefinitionInput;
 
+/**
+ * The exact paired Go SDK a go-cli generation is built on. Required when target.generator is go-cli
+ * and rejected otherwise. The descriptor is closed and immutable, because a CLI that pins a range
+ * or a branch pins nothing.
+ */
+export interface GoSdkDescriptor {
+  /**
+   * Go module path of the SDK the CLI imports, for example github.com/acme/payments-go. Must be a
+   * valid Go module path.
+   */
+  module_path: string;
+  /**
+   * Exact SDK module version the CLI requires: v-prefixed SemVer such as v1.2.3, or an immutable Go
+   * pseudo-version naming a commit such as v0.0.0-20240824120000-abcdef123456. Ranges, branches,
+   * and "latest" are rejected.
+   */
+  version: string;
+  /**
+   * SHA-256 hex digest of the Definition the SDK was generated from. Must match the resolved
+   * Definition, or the request fails with spec_error.
+   */
+  definition_digest: string;
+  /**
+   * The generator edition the SDK was generated with. Only the current edition, 2026-08-24, is
+   * accepted.
+   */
+  edition: string;
+  /**
+   * Go package identifier of the SDK, when the module path's last element does not imply it.
+   * Optional.
+   */
+  package_name?: string;
+}
+
 export interface GenerateRequest {
   definition: DefinitionInput;
-  /** Stateless generator descriptor; no persisted Target is created. */
+  /** One-shot generator descriptor; no persisted Target is created. */
   target: {
     generator: GeneratorKind;
   };
@@ -96,17 +132,18 @@ export interface GenerateRequest {
    */
   package_name?: string;
   /**
-   * Go module path override. Valid only for the Go SDK. Linked projects derive this from the Go
-   * destination repository by default.
+   * Go module path override for the generated artifact's own module. Valid only for the Go SDK and
+   * Go CLI outputs. Linked projects derive this from the Go destination repository by default.
    */
   module_path?: string;
+  go_sdk?: GoSdkDescriptor;
   config?: Config;
 }
 
 /** Response shape for GenerateRequest. */
 export interface GenerateRequestRead {
   definition: DefinitionInputRead;
-  /** Stateless generator descriptor; no persisted Target is created. */
+  /** One-shot generator descriptor; no persisted Target is created. */
   target: {
     generator: GeneratorKind | (string & {});
   };
@@ -116,10 +153,11 @@ export interface GenerateRequestRead {
    */
   package_name?: string;
   /**
-   * Go module path override. Valid only for the Go SDK. Linked projects derive this from the Go
-   * destination repository by default.
+   * Go module path override for the generated artifact's own module. Valid only for the Go SDK and
+   * Go CLI outputs. Linked projects derive this from the Go destination repository by default.
    */
   module_path?: string;
+  go_sdk?: GoSdkDescriptor;
   config?: ConfigRead;
 }
 
@@ -127,6 +165,23 @@ export interface GeneratedFile {
   /** Repo-relative path inside the generated package. */
   path: string;
   content: string;
+  /**
+   * Exact Git file mode. Omitted one-shot outputs are regular files.
+   * Default: "100644"
+   */
+  mode?: "100644" | "100755";
+}
+
+/** Response shape for GeneratedFile. */
+export interface GeneratedFileRead {
+  /** Repo-relative path inside the generated package. */
+  path: string;
+  content: string;
+  /**
+   * Exact Git file mode. Omitted one-shot outputs are regular files.
+   * Default: "100644"
+   */
+  mode?: ("100644" | "100755") | (string & {});
 }
 
 export interface GenerationMeta {
@@ -148,6 +203,18 @@ export interface GenerationMeta {
    * Generation.
    */
   generators: GeneratorKind[];
+  /**
+   * Present for go-cli generations only. Names the exact paired Go SDK module and version the CLI
+   * was generated against, as its go.mod requires it.
+   */
+  go_sdk?: {
+    /** Go module path of the SDK the Go CLI imports and pins. */
+    module_path: string;
+    /** Exact SDK module version the Go CLI requires, v-prefixed SemVer or a Go pseudo-version. */
+    version: string;
+    /** Go package identifier of the SDK, when the module path does not imply it. */
+    package_name?: string;
+  };
   resource_count?: number;
   operation_count?: number;
   schema_count?: number;
@@ -164,11 +231,6 @@ export interface GenerationMeta {
    * matched, or could not be opened.
    */
   pr_status?: "opened" | "no_changes" | "blocked";
-  /**
-   * Why the configured destination pull request was not opened. Generation itself still succeeded;
-   * fix this action and regenerate.
-   */
-  pr_error?: string;
   /**
    * Markdown changelog entry for this regeneration, from the API surface diff. Absent on a first
    * generation or when nothing changed.
@@ -180,10 +242,10 @@ export interface GenerationMeta {
    */
   breaking_count?: number;
   /**
-   * What the diff was measured against; "destination" means the .typeship/surface.json merged in
-   * the destination repository.
+   * What the diff was measured against. destination uses the accepted repository state;
+   * last-generation uses the previous successful Generation; none means no baseline was available.
    */
-  baseline?: "destination" | "none";
+  baseline?: "destination" | "last-generation" | "none";
   /** Objective compatibility of the generated API surface against the merged destination baseline. */
   api_compatibility?: "compatible" | "breaking" | "unknown";
   /**
@@ -200,11 +262,23 @@ export interface GenerationMeta {
    * The destination pull request's combined readiness decision for the exact bot-generated head.
    * Compatibility and version correctness remain separate fields above.
    */
-  release_readiness?: "success" | "failure" | "error";
+  release_readiness?: "success" | "failure" | "pending" | "error";
   /** The release-readiness decision in one line, as the commit status describes it. */
   release_readiness_note?: string;
   /** The package version the destination had before this regeneration. */
   previous_version?: string;
+  /** Files changed by the customer relative to the accepted combined baseline. */
+  customer_change_count?: number;
+  integration_state?: "conflicted"
+    | "checking"
+    | "checks_failed"
+    | "ready"
+    | "accepted"
+    | "outdated";
+  /** Separate compatibility result against the last published artifact. */
+  published_compatibility?: "compatible" | "breaking" | "unknown" | "not_applicable";
+  /** Version of the last published artifact used by published_compatibility. */
+  published_version?: string;
   file_count?: number;
   total_lines?: number;
   /** Deterministic Diagnostic summary for the exact Definition Revision consumed. */
@@ -234,6 +308,18 @@ export interface GenerationMetaRead {
    * Generation.
    */
   generators: Array<GeneratorKind | (string & {})>;
+  /**
+   * Present for go-cli generations only. Names the exact paired Go SDK module and version the CLI
+   * was generated against, as its go.mod requires it.
+   */
+  go_sdk?: {
+    /** Go module path of the SDK the Go CLI imports and pins. */
+    module_path: string;
+    /** Exact SDK module version the Go CLI requires, v-prefixed SemVer or a Go pseudo-version. */
+    version: string;
+    /** Go package identifier of the SDK, when the module path does not imply it. */
+    package_name?: string;
+  };
   resource_count?: number;
   operation_count?: number;
   schema_count?: number;
@@ -250,11 +336,6 @@ export interface GenerationMetaRead {
    * matched, or could not be opened.
    */
   pr_status?: ("opened" | "no_changes" | "blocked") | (string & {});
-  /**
-   * Why the configured destination pull request was not opened. Generation itself still succeeded;
-   * fix this action and regenerate.
-   */
-  pr_error?: string;
   /**
    * Markdown changelog entry for this regeneration, from the API surface diff. Absent on a first
    * generation or when nothing changed.
@@ -266,10 +347,10 @@ export interface GenerationMetaRead {
    */
   breaking_count?: number;
   /**
-   * What the diff was measured against; "destination" means the .typeship/surface.json merged in
-   * the destination repository.
+   * What the diff was measured against. destination uses the accepted repository state;
+   * last-generation uses the previous successful Generation; none means no baseline was available.
    */
-  baseline?: ("destination" | "none") | (string & {});
+  baseline?: ("destination" | "last-generation" | "none") | (string & {});
   /** Objective compatibility of the generated API surface against the merged destination baseline. */
   api_compatibility?: ("compatible" | "breaking" | "unknown") | (string & {});
   /**
@@ -286,11 +367,23 @@ export interface GenerationMetaRead {
    * The destination pull request's combined readiness decision for the exact bot-generated head.
    * Compatibility and version correctness remain separate fields above.
    */
-  release_readiness?: ("success" | "failure" | "error") | (string & {});
+  release_readiness?: ("success" | "failure" | "pending" | "error") | (string & {});
   /** The release-readiness decision in one line, as the commit status describes it. */
   release_readiness_note?: string;
   /** The package version the destination had before this regeneration. */
   previous_version?: string;
+  /** Files changed by the customer relative to the accepted combined baseline. */
+  customer_change_count?: number;
+  integration_state?: ("conflicted"
+    | "checking"
+    | "checks_failed"
+    | "ready"
+    | "accepted"
+    | "outdated") | (string & {});
+  /** Separate compatibility result against the last published artifact. */
+  published_compatibility?: ("compatible" | "breaking" | "unknown" | "not_applicable") | (string & {});
+  /** Version of the last published artifact used by published_compatibility. */
+  published_version?: string;
   file_count?: number;
   total_lines?: number;
   /** Deterministic Diagnostic summary for the exact Definition Revision consumed. */
@@ -302,6 +395,7 @@ export interface GenerationMetaRead {
 
 export interface GenerationResult {
   files: GeneratedFile[];
+  download?: GenerationDownload;
   warnings: string[];
   meta: GenerationMeta;
   limits?: GenerationLimits;
@@ -321,7 +415,8 @@ export interface GenerationResult {
 
 /** Response shape for GenerationResult. */
 export interface GenerationResultRead {
-  files: GeneratedFile[];
+  files: GeneratedFileRead[];
+  download?: GenerationDownload;
   warnings: string[];
   meta: GenerationMetaRead;
   limits?: GenerationLimitsRead;
@@ -339,6 +434,23 @@ export interface GenerationResultRead {
   request_id: RequestId;
 }
 
+/**
+ * Complete package ZIP from this exact result. Present on requests with Idempotency-Key, including
+ * automatic CLI, MCP, and SDK keys. Download before expires_at, verify sha256, and extract into an
+ * empty directory. Anyone with this URL can download the package; keep it private. Reading does not
+ * generate again or extend the 24-hour replay window.
+ */
+export interface GenerationDownload {
+  /** Format: uri */
+  url: string;
+  /** Format: date-time */
+  expires_at: string;
+  /** SHA-256 of the downloaded ZIP bytes. */
+  sha256: string;
+  size_bytes: number;
+  file_count: number;
+}
+
 /**
  * Present when the generation was capped: by the free plan, or because the call was anonymous.
  * Absent on uncapped generations.
@@ -426,7 +538,7 @@ export interface RepositoryReferenceRead {
 
 export interface RepositoryDefinitionSource {
   kind: "repository";
-  repository: RepositoryReference;
+  repository: RepositoryReferenceResponse;
   /** Repository-relative Definition entrypoint. */
   path: string;
 }
@@ -434,7 +546,7 @@ export interface RepositoryDefinitionSource {
 /** Response shape for RepositoryDefinitionSource. */
 export interface RepositoryDefinitionSourceRead {
   kind: "repository" | (string & {});
-  repository: RepositoryReferenceRead;
+  repository: RepositoryReferenceResponseRead;
   /** Repository-relative Definition entrypoint. */
   path: string;
 }
@@ -558,7 +670,7 @@ export interface DiagnosticFix {
    */
   kind: "spec_patch" | "source_edit";
   /** Exact patches when kind is spec_patch. */
-  patches?: DefinitionPatch[];
+  patches?: DefinitionPatchResponse[];
   /** Source-level guidance when an exact patch would invent intent. */
   instructions?: string;
 }
@@ -573,7 +685,7 @@ export interface DiagnosticFixRead {
    */
   kind: ("spec_patch" | "source_edit") | (string & {});
   /** Exact patches when kind is spec_patch. */
-  patches?: DefinitionPatchRead[];
+  patches?: DefinitionPatchResponseRead[];
   /** Source-level guidance when an exact patch would invent intent. */
   instructions?: string;
 }
@@ -590,7 +702,7 @@ export interface Diagnostic {
   title: string;
   /** What the API author should change. */
   description: string;
-  /** Why consumers of generated SDK, CLI, or MCP surfaces care. */
+  /** Why consumers of generated CLI, MCP, or SDK surfaces care. */
   impact: string;
   /** Public surfaces affected by the root cause. */
   surfaces: Array<"api" | "sdk" | "cli" | "mcp">;
@@ -601,7 +713,7 @@ export interface Diagnostic {
   evidence_basis: "contract" | "heuristic" | "implementation";
   /** Whether remediation requires intent that the Definition cannot prove. */
   owner_decision_required: boolean;
-  /** Concrete generated SDK, CLI, or MCP naming effect when Typeship can state it. */
+  /** Concrete generated CLI, MCP, or SDK naming effect when Typeship can state it. */
   surface_impact?: string;
   /** All affected coordinates, kept under one grouped diagnostic. */
   locations: DiagnosticLocation[];
@@ -625,7 +737,7 @@ export interface DiagnosticRead {
   title: string;
   /** What the API author should change. */
   description: string;
-  /** Why consumers of generated SDK, CLI, or MCP surfaces care. */
+  /** Why consumers of generated CLI, MCP, or SDK surfaces care. */
   impact: string;
   /** Public surfaces affected by the root cause. */
   surfaces: Array<("api" | "sdk" | "cli" | "mcp") | (string & {})>;
@@ -636,7 +748,7 @@ export interface DiagnosticRead {
   evidence_basis: ("contract" | "heuristic" | "implementation") | (string & {});
   /** Whether remediation requires intent that the Definition cannot prove. */
   owner_decision_required: boolean;
-  /** Concrete generated SDK, CLI, or MCP naming effect when Typeship can state it. */
+  /** Concrete generated CLI, MCP, or SDK naming effect when Typeship can state it. */
   surface_impact?: string;
   /** All affected coordinates, kept under one grouped diagnostic. */
   locations: DiagnosticLocation[];
@@ -737,7 +849,7 @@ export interface DiagnosticSuppressionSignal {
 export interface DiagnosticQualitySignals {
   suppressed_by_rule: DiagnosticSuppressionSignal[];
   /** Reviewed exceptions whose rule or exact path no longer matches this revision. */
-  stale_suppressions: DiagnosticSuppression[];
+  stale_suppressions: DiagnosticSuppressionResponse[];
 }
 
 /** Compact rule and location reference; full guidance appears once in diagnostics. */
@@ -788,7 +900,7 @@ export interface DiagnosticReport {
   summary: DiagnosticSummary;
   /** Stable grouped diagnostics, ordered by severity and rule identifier. */
   diagnostics: Diagnostic[];
-  policy: DiagnosticPolicy;
+  policy: DiagnosticPolicyResponse;
   evaluation: DiagnosticEvaluation;
   quality_signals: DiagnosticQualitySignals;
   delta: DiagnosticDelta;
@@ -811,7 +923,7 @@ export interface DiagnosticReportRead {
   summary: DiagnosticSummary;
   /** Stable grouped diagnostics, ordered by severity and rule identifier. */
   diagnostics: DiagnosticRead[];
-  policy: DiagnosticPolicyRead;
+  policy: DiagnosticPolicyResponseRead;
   evaluation: DiagnosticEvaluationRead;
   quality_signals: DiagnosticQualitySignals;
   delta: DiagnosticDeltaRead;
@@ -854,7 +966,7 @@ export interface RepositoryDeliveryInput {
   directory?: string | null;
   /** npm or Python registry identity where applicable. */
   package_name?: string | null;
-  /** Explicit Go module path where applicable. */
+  /** Go module identity for the Go SDK or Go CLI Target where applicable. */
   module_path?: string | null;
   /**
    * Commit repository-owned registry automation and report publication after the Draft merges.
@@ -870,7 +982,7 @@ export interface RepositoryDeliveryInputRead {
   directory?: string | null;
   /** npm or Python registry identity where applicable. */
   package_name?: string | null;
-  /** Explicit Go module path where applicable. */
+  /** Go module identity for the Go SDK or Go CLI Target where applicable. */
   module_path?: string | null;
   /**
    * Commit repository-owned registry automation and report publication after the Draft merges.
@@ -901,7 +1013,7 @@ export interface RepositoryDelivery {
   target_id: TargetId;
   kind: "repository";
   state: "active" | "disabled";
-  repository: RepositoryReference;
+  repository: RepositoryReferenceResponse;
   directory: string | null;
   package_name: string | null;
   module_path: string | null;
@@ -919,7 +1031,7 @@ export interface RepositoryDeliveryRead {
   target_id: TargetId;
   kind: "repository" | (string & {});
   state: ("active" | "disabled") | (string & {});
-  repository: RepositoryReferenceRead;
+  repository: RepositoryReferenceResponseRead;
   directory: string | null;
   package_name: string | null;
   module_path: string | null;
@@ -966,6 +1078,94 @@ export type DeliveryRead = RepositoryDeliveryRead
   | HostedMcpDeliveryRead
   | Record<string, unknown> & { kind?: string };
 
+/**
+ * Repository fields are present for a repository Delivery; url is present for a hosted_mcp
+ * Delivery.
+ */
+export interface DeliveryResponse {
+  id: DeliveryId;
+  object: "delivery";
+  target_id: TargetId;
+  kind: "repository" | "hosted_mcp";
+  state: "active" | "disabled";
+  repository?: RepositoryReferenceResponse;
+  directory?: string | null;
+  package_name?: string | null;
+  module_path?: string | null;
+  publish_on_merge?: boolean;
+  /** Format: uri */
+  url?: string | null;
+  /** Format: date-time */
+  created_at: string;
+  /** Format: date-time */
+  updated_at: string;
+  request_id: RequestId;
+}
+
+/** Response shape for DeliveryResponse. */
+export interface DeliveryResponseRead {
+  id: DeliveryId;
+  object: "delivery" | (string & {});
+  target_id: TargetId;
+  kind: ("repository" | "hosted_mcp") | (string & {});
+  state: ("active" | "disabled") | (string & {});
+  repository?: RepositoryReferenceResponseRead;
+  directory?: string | null;
+  package_name?: string | null;
+  module_path?: string | null;
+  publish_on_merge?: boolean;
+  /** Format: uri */
+  url?: string | null;
+  /** Format: date-time */
+  created_at: string;
+  /** Format: date-time */
+  updated_at: string;
+  request_id: RequestId;
+}
+
+/**
+ * One Target generated from a sibling Target. A go-cli Target carries kind go_sdk_module, naming
+ * the Go SDK Target it is generated against.
+ */
+export interface TargetDependency {
+  kind: "go_sdk_module";
+  target_id: TargetId;
+}
+
+/** Response shape for TargetDependency. */
+export interface TargetDependencyRead {
+  kind: "go_sdk_module" | (string & {});
+  target_id: TargetId;
+}
+
+/**
+ * Required checks run against the complete combined package. Generated checks and customer commands
+ * share one reproducible workflow; repository_required names existing repository checks. Supplying
+ * checks replaces all settings. Omitted generated restores build, package, and public_entrypoint;
+ * omitted repository_required and customer restore empty lists. An empty object restores these
+ * defaults. An empty array clears the corresponding list.
+ */
+export interface TargetChecks {
+  /** Default: ["build","package","public_entrypoint"] */
+  generated?: Array<"build" | "package" | "public_entrypoint">;
+  repository_required?: string[];
+  customer?: Array<{
+    name: string;
+    command: string;
+  }>;
+}
+
+/** Response shape for TargetChecks. */
+export interface TargetChecksRead {
+  /** Default: ["build","package","public_entrypoint"] */
+  generated?: Array<("build" | "package" | "public_entrypoint") | (string & {})>;
+  repository_required?: string[];
+  customer?: Array<{
+    name: string;
+    command: string;
+  }>;
+}
+
 export interface TargetFields {
   name: string;
   definition_id: DefinitionId;
@@ -978,6 +1178,7 @@ export interface TargetFields {
   release_channel?: "stable" | "prerelease";
   /** Optional larger or prerelease SemVer for the next reviewed release. */
   proposed_version?: string | null;
+  checks?: TargetChecks;
   /**
    * Target-specific overrides merged over Project.config. GraphQL settings are rejected here and
    * belong to the Definition.
@@ -999,6 +1200,7 @@ export interface TargetFieldsRead {
   release_channel?: ("stable" | "prerelease") | (string & {});
   /** Optional larger or prerelease SemVer for the next reviewed release. */
   proposed_version?: string | null;
+  checks?: TargetChecksRead;
   /**
    * Target-specific overrides merged over Project.config. GraphQL settings are rejected here and
    * belong to the Definition.
@@ -1017,6 +1219,7 @@ export interface InitialTargetFields {
   /** Default: "stable" */
   release_channel?: "stable" | "prerelease";
   proposed_version?: string | null;
+  checks?: TargetChecks;
   /**
    * Target-specific overrides merged over Project.config. GraphQL settings are rejected here and
    * belong to the Definition.
@@ -1036,6 +1239,7 @@ export interface InitialTargetFieldsRead {
   /** Default: "stable" */
   release_channel?: ("stable" | "prerelease") | (string & {});
   proposed_version?: string | null;
+  checks?: TargetChecksRead;
   /**
    * Target-specific overrides merged over Project.config. GraphQL settings are rejected here and
    * belong to the Definition.
@@ -1049,12 +1253,25 @@ export interface TargetUpdateRequest {
   state?: "active" | "disabled";
   edition?: string;
   release_channel?: "stable" | "prerelease";
+  /**
+   * Send only this field to select an exact SemVer, or null for automatic selection. The Target and
+   * Draft endpoints both support an optional If-Match precondition.
+   */
   proposed_version?: string | null;
+  checks?: TargetChecks;
   /**
-   * Target-specific overrides merged over Project.config. GraphQL settings are rejected here and
-   * belong to the Definition.
+   * Replaces the complete stored override object. Send null or an empty object to resume Project
+   * inheritance. Effective values merge over Project.config; GraphQL settings belong to the
+   * Definition.
    */
   config?: TargetConfig | null;
+  /**
+   * Replaces the Delivery set; include each kind you want to keep. Retained kinds preserve their
+   * ID, creation time, and hosted URL. Each supplied Delivery replaces its configuration, so
+   * omitted optional settings reset to their defaults. Omit deliveries to keep the existing set, or
+   * send [] to remove all Deliveries. Removing and later recreating a kind allocates a new ID and,
+   * for hosted_mcp, a new URL.
+   */
   deliveries?: DeliveryInput[];
 }
 
@@ -1064,16 +1281,71 @@ export interface TargetUpdateRequestRead {
   state?: ("active" | "disabled") | (string & {});
   edition?: string;
   release_channel?: ("stable" | "prerelease") | (string & {});
+  /**
+   * Send only this field to select an exact SemVer, or null for automatic selection. The Target and
+   * Draft endpoints both support an optional If-Match precondition.
+   */
   proposed_version?: string | null;
+  checks?: TargetChecksRead;
   /**
-   * Target-specific overrides merged over Project.config. GraphQL settings are rejected here and
-   * belong to the Definition.
+   * Replaces the complete stored override object. Send null or an empty object to resume Project
+   * inheritance. Effective values merge over Project.config; GraphQL settings belong to the
+   * Definition.
    */
   config?: TargetConfigRead | null;
+  /**
+   * Replaces the Delivery set; include each kind you want to keep. Retained kinds preserve their
+   * ID, creation time, and hosted URL. Each supplied Delivery replaces its configuration, so
+   * omitted optional settings reset to their defaults. Omit deliveries to keep the existing set, or
+   * send [] to remove all Deliveries. Removing and later recreating a kind allocates a new ID and,
+   * for hosted_mcp, a new URL.
+   */
   deliveries?: DeliveryInputRead[];
 }
 
 export interface Target {
+  id: TargetId;
+  object: "target";
+  project_id: ProjectId;
+  definition_id: DefinitionId;
+  name: string;
+  generator: GeneratorKind;
+  /**
+   * Present only on a go-cli Target, naming the sibling Go SDK Target the CLI is generated against.
+   * Every other generator reports null.
+   */
+  dependency: TargetDependency | null;
+  state: "active" | "disabled";
+  edition: string;
+  release_channel: "stable" | "prerelease";
+  version_policy: {
+    mode: "reviewed_semver";
+    pre1_breaking: "minor";
+  };
+  /**
+   * Read-only version of the Target's Current release, or null before its first release. Registry
+   * publication status is separate; inspect the Target Release for publication results.
+   */
+  current_version: string | null;
+  proposed_version: string | null;
+  proposed_version_source: "console" | "api" | "github" | null;
+  checks: TargetChecksResponse;
+  /**
+   * Target-specific overrides merged over Project.config. GraphQL settings are Definition-owned and
+   * never appear here.
+   */
+  config: TargetConfigResponse | null;
+  /** At most one repository and one hosted MCP Delivery. */
+  deliveries: Delivery[];
+  /** Format: date-time */
+  created_at: string;
+  /** Format: date-time */
+  updated_at: string;
+  request_id?: RequestId;
+}
+
+/** Request shape for Target. */
+export interface TargetWrite {
   id: TargetId;
   object: "target";
   project_id: ProjectId;
@@ -1088,21 +1360,18 @@ export interface Target {
     pre1_breaking: "minor";
   };
   /**
-   * Deprecated projection of the newest immutable Target Release; null until a release becomes
-   * Current.
-   * @deprecated
+   * Read-only version of the Target's Current release, or null before its first release. Registry
+   * publication status is separate; inspect the Target Release for publication results.
    */
   current_version: string | null;
   proposed_version: string | null;
   proposed_version_source: "console" | "api" | "github" | null;
-  proposed_version_actor: string | null;
-  /** Optimistic concurrency revision for Draft selections. */
-  release_revision: number;
+  checks: TargetChecksResponse;
   /**
    * Target-specific overrides merged over Project.config. GraphQL settings are Definition-owned and
    * never appear here.
    */
-  config: TargetConfig | null;
+  config: TargetConfigResponse | null;
   /** At most one repository and one hosted MCP Delivery. */
   deliveries: Delivery[];
   /** Format: date-time */
@@ -1120,6 +1389,11 @@ export interface TargetRead {
   definition_id: DefinitionId;
   name: string;
   generator: GeneratorKind | (string & {});
+  /**
+   * Present only on a go-cli Target, naming the sibling Go SDK Target the CLI is generated against.
+   * Every other generator reports null.
+   */
+  dependency: TargetDependencyRead | null;
   state: ("active" | "disabled") | (string & {});
   edition: string;
   release_channel: ("stable" | "prerelease") | (string & {});
@@ -1128,21 +1402,18 @@ export interface TargetRead {
     pre1_breaking: "minor" | (string & {});
   };
   /**
-   * Deprecated projection of the newest immutable Target Release; null until a release becomes
-   * Current.
-   * @deprecated
+   * Read-only version of the Target's Current release, or null before its first release. Registry
+   * publication status is separate; inspect the Target Release for publication results.
    */
   current_version: string | null;
   proposed_version: string | null;
   proposed_version_source: ("console" | "api" | "github" | null) | (string & {}) | null;
-  proposed_version_actor: string | null;
-  /** Optimistic concurrency revision for Draft selections. */
-  release_revision: number;
+  checks: TargetChecksResponseRead;
   /**
    * Target-specific overrides merged over Project.config. GraphQL settings are Definition-owned and
    * never appear here.
    */
-  config: TargetConfigRead | null;
+  config: TargetConfigResponseRead | null;
   /** At most one repository and one hosted MCP Delivery. */
   deliveries: DeliveryRead[];
   /** Format: date-time */
@@ -1154,6 +1425,9 @@ export interface TargetRead {
 
 export type TargetResponse = Target & ResponseMetadata;
 
+/** Request shape for TargetResponse. */
+export type TargetResponseWrite = TargetWrite & ResponseMetadata;
+
 /** Response shape for TargetResponse. */
 export type TargetResponseRead = TargetRead & ResponseMetadata;
 
@@ -1165,6 +1439,15 @@ export interface TargetList {
   request_id: RequestId;
 }
 
+/** Request shape for TargetList. */
+export interface TargetListWrite {
+  object: ListObject;
+  data: TargetWrite[];
+  has_more: boolean;
+  next_cursor: string | null;
+  request_id: RequestId;
+}
+
 /** Response shape for TargetList. */
 export interface TargetListRead {
   object: ListObject;
@@ -1186,10 +1469,14 @@ export interface TargetRelease {
   channel: "stable" | "prerelease";
   /** Delivery provider that accepted the release. */
   provider: string;
-  repository: RepositoryReference | null;
+  repository: RepositoryReferenceResponse | null;
   definition_revision_id: DefinitionRevisionId | null;
   /** Immutable provider-native revision that was merged or published. */
   delivery_revision: string;
+  /** Digest of the exact accepted source tree used for publication. */
+  source_digest: string | null;
+  checks: PackageCheck[];
+  accepted_risks: AcceptedCompatibilityRisk[];
   import_provenance: {
     tag: string | null;
     /** Format: uri */
@@ -1218,10 +1505,14 @@ export interface TargetReleaseRead {
   channel: ("stable" | "prerelease") | (string & {});
   /** Delivery provider that accepted the release. */
   provider: string;
-  repository: RepositoryReferenceRead | null;
+  repository: RepositoryReferenceResponseRead | null;
   definition_revision_id: DefinitionRevisionId | null;
   /** Immutable provider-native revision that was merged or published. */
   delivery_revision: string;
+  /** Digest of the exact accepted source tree used for publication. */
+  source_digest: string | null;
+  checks: PackageCheckRead[];
+  accepted_risks: AcceptedCompatibilityRiskRead[];
   import_provenance: {
     tag: string | null;
     /** Format: uri */
@@ -1264,14 +1555,15 @@ export interface Publication {
   object: "publication";
   target_release_id: TargetReleaseId;
   destination: "github" | "npm" | "pypi" | "go" | "mcp";
-  state: "pending" | "publishing" | "published" | "failed";
+  state: "pending" | "publishing" | "published" | "failed" | "disabled";
   attempt: number;
   /** Format: uri */
   run_url: string | null;
   /** Format: uri */
   registry_url: string | null;
   artifact_digest: string | null;
-  error: string | null;
+  /** Recorded failures. Empty when this resource has no recorded failure. */
+  errors: DomainError[];
   /** Format: date-time */
   started_at: string | null;
   /** Format: date-time */
@@ -1286,14 +1578,15 @@ export interface PublicationRead {
   object: "publication" | (string & {});
   target_release_id: TargetReleaseId;
   destination: ("github" | "npm" | "pypi" | "go" | "mcp") | (string & {});
-  state: ("pending" | "publishing" | "published" | "failed") | (string & {});
+  state: ("pending" | "publishing" | "published" | "failed" | "disabled") | (string & {});
   attempt: number;
   /** Format: uri */
   run_url: string | null;
   /** Format: uri */
   registry_url: string | null;
   artifact_digest: string | null;
-  error: string | null;
+  /** Recorded failures. Empty when this resource has no recorded failure. */
+  errors: DomainErrorRead[];
   /** Format: date-time */
   started_at: string | null;
   /** Format: date-time */
@@ -1302,14 +1595,25 @@ export interface PublicationRead {
   updated_at: string;
 }
 
+export type PublicationResponse = Publication & {
+  /** Format: date-time */
+  created_at: string;
+} & ResponseMetadata;
+
+/** Response shape for PublicationResponse. */
+export type PublicationResponseRead = PublicationRead & {
+  /** Format: date-time */
+  created_at: string;
+} & ResponseMetadata;
+
 export type TargetDraftSelection = {
   mode: "automatic";
 }
   | {
       mode: "exact";
       version: string;
+      /** Where the selection was made. */
       source: "console" | "api" | "github" | null;
-      actor: string | null;
     };
 
 /** Response shape for TargetDraftSelection. */
@@ -1319,18 +1623,118 @@ export type TargetDraftSelectionRead = {
   | {
       mode: "exact" | (string & {});
       version: string;
+      /** Where the selection was made. */
       source: ("console" | "api" | "github" | null) | (string & {}) | null;
-      actor: string | null;
     };
 
+/**
+ * The Draft's state and its one next step. no_draft: no Draft is open; generate the Target.
+ * generating: Typeship is updating the Draft branch; retrieve the Draft again. branch_changed: the
+ * Draft branch has a commit Typeship has not integrated, such as your push or a discard; Typeship
+ * starts that integration from the repository event, so retrieve the Draft again, and generate the
+ * Target only if the status persists. conflicted: some conflicts have no decision; list files with
+ * filter=conflicted and resolve them. needs_generation: saved conflict decisions, an approved
+ * history recovery, or a settings change are not applied yet; generate the Target.
+ * history_rewritten: the default branch no longer contains the accepted package; review files with
+ * filter=history and approve history recovery. checking: package checks are running on
+ * head_revision; retrieve the Draft again. failed: readiness failed or could not be assessed;
+ * inspect readiness and checks, fix the package or pull request, and push to the Draft. ready:
+ * every required check passed on head_revision; merge the pull request.
+ */
+export const DraftStatus = {
+  NO_DRAFT: "no_draft",
+  GENERATING: "generating",
+  BRANCH_CHANGED: "branch_changed",
+  CONFLICTED: "conflicted",
+  NEEDS_GENERATION: "needs_generation",
+  HISTORY_REWRITTEN: "history_rewritten",
+  CHECKING: "checking",
+  FAILED: "failed",
+  READY: "ready",
+} as const;
+export type DraftStatus = (typeof DraftStatus)[keyof typeof DraftStatus];
+
+export interface TargetDraftConflicts {
+  /** Conflicts in the current merge stage. */
+  total: number;
+  /** Conflicts with a saved decision for head_revision. */
+  decided: number;
+}
+
+/** The approval inputs for a default-branch history rewrite. */
+export interface TargetDraftHistoryRecovery {
+  /** Rewritten default-branch commit. Send it as expected_default_revision. */
+  default_revision: string;
+  /** Draft commit Typeship last observed. Send it as expected_head_revision. */
+  head_revision: string | null;
+  /** Existing Draft branch that stays available after recovery opens a new Draft. */
+  preserved_branch: string | null;
+}
+
+/**
+ * Readiness decision for the Draft's head_revision. Null readiness on the Draft means no candidate
+ * exists.
+ */
+export interface TargetDraftReadiness {
+  /**
+   * success means required checks passed; failure means the Draft needs correction or review; error
+   * means assessment could not finish; pending means checks have not finished.
+   */
+  state: "success" | "failure" | "error" | "pending";
+  /** Human-readable explanation of the current decision. Do not parse it for control flow. */
+  description: string;
+  /** API surface comparison against Current. unknown means analysis is unavailable. */
+  api_compatibility: "compatible" | "breaking" | "unknown";
+  /**
+   * Package and supported SDK source comparison against Current. unknown means analysis is
+   * incomplete or unavailable.
+   */
+  package_compatibility: "compatible" | "breaking" | "unknown";
+  /** Whether the version satisfies the assessed change. Null when no verdict is available. */
+  version_correct: boolean | null;
+  /** Minimum assessed version bump. Null when no bump has been determined. */
+  required_bump: "major" | "minor" | "patch" | null;
+  /** Version used for the comparison. Null when no comparison version is available. */
+  previous_version: string | null;
+  /** Draft title error that must be corrected before release. Null when none is recorded. */
+  title_error: string | null;
+}
+
+/** Response shape for TargetDraftReadiness. */
+export interface TargetDraftReadinessRead {
+  /**
+   * success means required checks passed; failure means the Draft needs correction or review; error
+   * means assessment could not finish; pending means checks have not finished.
+   */
+  state: ("success" | "failure" | "error" | "pending") | (string & {});
+  /** Human-readable explanation of the current decision. Do not parse it for control flow. */
+  description: string;
+  /** API surface comparison against Current. unknown means analysis is unavailable. */
+  api_compatibility: ("compatible" | "breaking" | "unknown") | (string & {});
+  /**
+   * Package and supported SDK source comparison against Current. unknown means analysis is
+   * incomplete or unavailable.
+   */
+  package_compatibility: ("compatible" | "breaking" | "unknown") | (string & {});
+  /** Whether the version satisfies the assessed change. Null when no verdict is available. */
+  version_correct: boolean | null;
+  /** Minimum assessed version bump. Null when no bump has been determined. */
+  required_bump: ("major" | "minor" | "patch" | null) | (string & {}) | null;
+  /** Version used for the comparison. Null when no comparison version is available. */
+  previous_version: string | null;
+  /** Draft title error that must be corrected before release. Null when none is recorded. */
+  title_error: string | null;
+}
+
 export interface TargetDraft {
   object: "target_draft";
   target_id: TargetId;
-  revision: number;
+  project_id: ProjectId;
+  status: DraftStatus;
   current_version: string | null;
   version: string | null;
   selection: TargetDraftSelection;
-  readiness: Record<string, unknown> | null;
+  readiness: TargetDraftReadiness | null;
   changes: {
     /** Cumulative changelog against Current. */
     changelog?: string | null;
@@ -1338,21 +1742,38 @@ export interface TargetDraft {
     previous_version?: string | null;
   }
     | null;
+  /**
+   * Draft commit that readiness, checks, and conflicts describe. Send it as expected_head_revision
+   * when resolving or discarding.
+   */
   head_revision: string | null;
   /** Format: uri */
   pull_request_url: string | null;
+  /** Generation whose package this Draft contains. */
+  generation_id: GenerationId | null;
+  /** Conflict counts for the current merge stage; null when the Draft has no conflicts. */
+  conflicts: TargetDraftConflicts | null;
+  /**
+   * Files where the Draft differs from the last accepted package; null until the Draft is
+   * integrated.
+   */
+  customized_files: number | null;
+  /** Present only while status is history_rewritten. */
+  history_recovery: TargetDraftHistoryRecovery | null;
   request_id?: RequestId;
+  checks: PackageCheck[];
 }
 
 /** Response shape for TargetDraft. */
 export interface TargetDraftRead {
   object: "target_draft" | (string & {});
   target_id: TargetId;
-  revision: number;
+  project_id: ProjectId;
+  status: DraftStatus | (string & {});
   current_version: string | null;
   version: string | null;
   selection: TargetDraftSelectionRead;
-  readiness: Record<string, unknown> | null;
+  readiness: TargetDraftReadinessRead | null;
   changes: {
     /** Cumulative changelog against Current. */
     changelog?: string | null;
@@ -1360,10 +1781,26 @@ export interface TargetDraftRead {
     previous_version?: string | null;
   }
     | null;
+  /**
+   * Draft commit that readiness, checks, and conflicts describe. Send it as expected_head_revision
+   * when resolving or discarding.
+   */
   head_revision: string | null;
   /** Format: uri */
   pull_request_url: string | null;
+  /** Generation whose package this Draft contains. */
+  generation_id: GenerationId | null;
+  /** Conflict counts for the current merge stage; null when the Draft has no conflicts. */
+  conflicts: TargetDraftConflicts | null;
+  /**
+   * Files where the Draft differs from the last accepted package; null until the Draft is
+   * integrated.
+   */
+  customized_files: number | null;
+  /** Present only while status is history_rewritten. */
+  history_recovery: TargetDraftHistoryRecovery | null;
   request_id?: RequestId;
+  checks: PackageCheckRead[];
 }
 
 export type TargetDraftResponse = TargetDraft & ResponseMetadata;
@@ -1374,7 +1811,52 @@ export type TargetDraftResponseRead = TargetDraftRead & ResponseMetadata;
 export interface TargetDraftUpdate {
   /** Exact SemVer, or null to return to automatic selection. */
   version: string | null;
-  expected_revision?: number;
+}
+
+export interface PackageCheck {
+  name: string;
+  source: "typeship" | "customer" | "repository" | "compatibility";
+  required: boolean;
+  state: "pending" | "passed" | "failed" | "not_assessed";
+  reason: string;
+  revision: string;
+  /** Format: uri */
+  url: string | null;
+  /** Format: date-time */
+  observed_at: string | null;
+}
+
+/** Response shape for PackageCheck. */
+export interface PackageCheckRead {
+  name: string;
+  source: ("typeship" | "customer" | "repository" | "compatibility") | (string & {});
+  required: boolean;
+  state: ("pending" | "passed" | "failed" | "not_assessed") | (string & {});
+  reason: string;
+  revision: string;
+  /** Format: uri */
+  url: string | null;
+  /** Format: date-time */
+  observed_at: string | null;
+}
+
+export interface AcceptedCompatibilityRisk {
+  comparison: "current" | "published";
+  reason: string;
+  approved_by: string;
+  approved_revision: string;
+  /** Format: date-time */
+  approved_at: string;
+}
+
+/** Response shape for AcceptedCompatibilityRisk. */
+export interface AcceptedCompatibilityRiskRead {
+  comparison: ("current" | "published") | (string & {});
+  reason: string;
+  approved_by: string;
+  approved_revision: string;
+  /** Format: date-time */
+  approved_at: string;
 }
 
 export interface TargetAdoption {
@@ -1406,7 +1888,7 @@ export interface RepositoryHealthIssueRead {
 }
 
 export interface RepositoryHealth {
-  repository: RepositoryReference;
+  repository: RepositoryReferenceResponse;
   roles: Array<"source" | "destination">;
   status: "ready" | "action_required";
   default_branch?: string;
@@ -1422,7 +1904,7 @@ export interface RepositoryHealth {
 
 /** Response shape for RepositoryHealth. */
 export interface RepositoryHealthRead {
-  repository: RepositoryReferenceRead;
+  repository: RepositoryReferenceResponseRead;
   roles: Array<("source" | "destination") | (string & {})>;
   status: ("ready" | "action_required") | (string & {});
   default_branch?: string;
@@ -1509,9 +1991,9 @@ export interface Definition {
   project_id: ProjectId;
   source: DefinitionSource;
   format: "openapi" | "graphql" | null;
-  patches: DefinitionPatch[];
-  graphql: GraphqlSettings | null;
-  diagnostic_policy: DiagnosticPolicy;
+  patches: DefinitionPatchResponse[];
+  graphql: GraphqlSettingsResponse | null;
+  diagnostic_policy: DiagnosticPolicyResponse;
   latest_revision_id: DefinitionRevisionId | null;
   /** Format: date-time */
   created_at: string;
@@ -1527,9 +2009,9 @@ export interface DefinitionWrite {
   project_id: ProjectId;
   source: DefinitionSourceWrite;
   format: "openapi" | "graphql" | null;
-  patches: DefinitionPatch[];
-  graphql: GraphqlSettings | null;
-  diagnostic_policy: DiagnosticPolicy;
+  patches: DefinitionPatchResponse[];
+  graphql: GraphqlSettingsResponse | null;
+  diagnostic_policy: DiagnosticPolicyResponse;
   latest_revision_id: DefinitionRevisionId | null;
   /** Format: date-time */
   created_at: string;
@@ -1545,9 +2027,9 @@ export interface DefinitionRead {
   project_id: ProjectId;
   source: DefinitionSourceRead;
   format: ("openapi" | "graphql" | null) | (string & {}) | null;
-  patches: DefinitionPatchRead[];
-  graphql: GraphqlSettingsRead | null;
-  diagnostic_policy: DiagnosticPolicyRead;
+  patches: DefinitionPatchResponseRead[];
+  graphql: GraphqlSettingsResponseRead | null;
+  diagnostic_policy: DiagnosticPolicyResponseRead;
   latest_revision_id: DefinitionRevisionId | null;
   /** Format: date-time */
   created_at: string;
@@ -1556,18 +2038,29 @@ export interface DefinitionRead {
   request_id: RequestId;
 }
 
+/**
+ * Omitted fields remain unchanged. Supplied objects and arrays replace the whole field. URL source
+ * headers are preserved when the URL is unchanged and headers are omitted; null or empty headers
+ * clear them.
+ */
 export interface DefinitionUpdateRequest {
   source?: DefinitionSourceInput;
+  /** Replace all patches in order. An empty array removes every patch; null is invalid. */
   patches?: DefinitionPatch[];
+  /** Replace all GraphQL settings. Null or an empty object clears them. */
   graphql?: GraphqlSettings | null;
+  /** Replace the complete policy and suppression list. Null and an empty object are invalid. */
   diagnostic_policy?: DiagnosticPolicy;
 }
 
 /** Response shape for DefinitionUpdateRequest. */
 export interface DefinitionUpdateRequestRead {
   source?: DefinitionSourceInputRead;
+  /** Replace all patches in order. An empty array removes every patch; null is invalid. */
   patches?: DefinitionPatchRead[];
+  /** Replace all GraphQL settings. Null or an empty object clears them. */
   graphql?: GraphqlSettingsRead | null;
+  /** Replace the complete policy and suppression list. Null and an empty object are invalid. */
   diagnostic_policy?: DiagnosticPolicyRead;
 }
 
@@ -1596,7 +2089,7 @@ export interface Project {
    * Shared defaults inherited by every Target. A Target's config overrides these defaults; GraphQL
    * settings remain Definition-owned.
    */
-  config: ProjectConfig | null;
+  config: ProjectConfigResponse | null;
   /** Format: date-time */
   created_at: string;
   /**
@@ -1627,7 +2120,7 @@ export interface ProjectWrite {
    * Shared defaults inherited by every Target. A Target's config overrides these defaults; GraphQL
    * settings remain Definition-owned.
    */
-  config: ProjectConfig | null;
+  config: ProjectConfigResponse | null;
   request_id: RequestId;
 }
 
@@ -1653,7 +2146,7 @@ export interface ProjectRead {
    * Shared defaults inherited by every Target. A Target's config overrides these defaults; GraphQL
    * settings remain Definition-owned.
    */
-  config: ProjectConfigRead | null;
+  config: ProjectConfigResponseRead | null;
   /** Format: date-time */
   created_at: string;
   /**
@@ -1865,19 +2358,28 @@ export interface OAuthApplicationRead {
 
 /**
  * Authenticated identity read used to verify a login before it is saved. Operation is auto-detected
- * when omitted. Requests must include at least one of subject_field, account_field, or
- * organization_field.
+ * when omitted or null. At least one of subject_field, account_field, or organization_field must be
+ * a non-null JSON Pointer. Null clears an individual mapping while another remains. Set
+ * identity_verification itself to null to remove the whole policy.
  */
-export interface IdentityVerification {
+export type IdentityVerification = {
   /** resource.method of a safe identity read with no required arguments. */
-  operation?: string;
+  operation?: string | null;
   /** JSON Pointer to the stable caller ID in the identity response. */
-  subject_field?: string;
+  subject_field?: string | null;
   /** JSON Pointer to the customer account ID. */
-  account_field?: string;
+  account_field?: string | null;
   /** JSON Pointer to the customer organization ID. */
-  organization_field?: string;
+  organization_field?: string | null;
+} & ({
+  subject_field: string;
 }
+  | {
+      account_field: string;
+    }
+  | {
+      organization_field: string;
+    });
 
 /** OAuth application and request-value overrides for one named API environment. */
 export interface AuthenticationEnvironment {
@@ -1890,7 +2392,7 @@ export interface AuthenticationEnvironment {
 
 /**
  * Public authentication defaults for generated clients and tools. Stored Projects own the OAuth
- * server, application catalog, and identity policy; stateless generation accepts the same shape for
+ * server, application catalog, and identity policy; one-shot generation accepts the same shape for
  * one run. Runtime credentials and client secrets are never accepted.
  */
 export interface AuthenticationConfig {
@@ -1934,6 +2436,12 @@ export interface CliBehavior {
    * code phones nobody unless this is enabled.
    */
   update_notice?: boolean;
+  /**
+   * Public HTTP(S) URL read by the optional changelog command in generated CLIs. Supports UTF-8
+   * Markdown, plain text, and static HTML; embedded credentials are not allowed. Omit or clear to
+   * disable, then regenerate.
+   */
+  changelog_url?: string | null;
   /**
    * Where the generated CLI's feedback command sends users. GitHub issues/new URLs get a prefilled
    * title and environment details.
@@ -2108,7 +2616,7 @@ export interface PackageBehavior {
  * Everything Typeship needs beyond the Definition, in one object: generation customization
  * (globals, retries, pagination, readme) and how the generated tooling behaves (cli, mcp, package,
  * docs_url). Plain configuration. Typeship never requires vendor extensions inside the Definition
- * itself. Stateless generation also accepts GraphQL settings here; stored projects keep those
+ * itself. One-shot generation also accepts GraphQL settings here; stored projects keep those
  * settings on their Definition.
  */
 export interface Config {
@@ -2134,6 +2642,7 @@ export interface Config {
    * The API's documentation site. Read through its llms.txt by the generated CLI's docs command,
    * the MCP server's docs tools, and the package's AGENTS.md. Defaults to the Definition's
    * externalDocs URL.
+   * Format: uri
    */
   docs_url?: string | null;
   /**
@@ -2167,6 +2676,7 @@ export interface ConfigRead {
    * The API's documentation site. Read through its llms.txt by the generated CLI's docs command,
    * the MCP server's docs tools, and the package's AGENTS.md. Defaults to the Definition's
    * externalDocs URL.
+   * Format: uri
    */
   docs_url?: string | null;
   /**
@@ -2204,6 +2714,7 @@ export interface ProjectConfig {
    * The API's documentation site. Read through its llms.txt by the generated CLI's docs command,
    * the MCP server's docs tools, and the package's AGENTS.md. Defaults to the Definition's
    * externalDocs URL.
+   * Format: uri
    */
   docs_url?: string | null;
   /**
@@ -2236,6 +2747,7 @@ export interface ProjectConfigRead {
    * The API's documentation site. Read through its llms.txt by the generated CLI's docs command,
    * the MCP server's docs tools, and the package's AGENTS.md. Defaults to the Definition's
    * externalDocs URL.
+   * Format: uri
    */
   docs_url?: string | null;
   /**
@@ -2251,33 +2763,67 @@ export interface ProjectConfigRead {
  * Self-hosted MCP access may be overridden for a Target-specific deployment.
  */
 export interface TargetConfig {
+  /**
+   * Wire names of query/header parameters that become settable once on the generated client and
+   * auto-apply to every operation that accepts them; per-call values win. Names that match nothing
+   * are reported as generation warnings.
+   */
   globals?: string[];
   retries?: RetryTuning;
+  /**
+   * Per-operation pagination control, keyed by operationId or "METHOD /path". Unmatched keys are
+   * reported as generation warnings.
+   */
   pagination?: Record<string, PaginationRule | boolean>;
   auth?: TargetAuthenticationConfig;
   cli?: CliBehavior;
   mcp?: McpBehavior;
   readme?: ReadmeBehavior;
   package?: PackageBehavior;
-  /** Format: uri */
+  /**
+   * The API's documentation site. Read through its llms.txt by the generated CLI's docs command,
+   * the MCP server's docs tools, and the package's AGENTS.md. Defaults to the Definition's
+   * externalDocs URL.
+   * Format: uri
+   */
   docs_url?: string | null;
-  /** Format: uri */
+  /**
+   * Exact llms.txt URL when the documentation site does not publish it at docs_url + /llms.txt.
+   * Format: uri
+   */
   docs_index_url?: string | null;
 }
 
 /** Response shape for TargetConfig. */
 export interface TargetConfigRead {
+  /**
+   * Wire names of query/header parameters that become settable once on the generated client and
+   * auto-apply to every operation that accepts them; per-call values win. Names that match nothing
+   * are reported as generation warnings.
+   */
   globals?: string[];
   retries?: RetryTuning;
+  /**
+   * Per-operation pagination control, keyed by operationId or "METHOD /path". Unmatched keys are
+   * reported as generation warnings.
+   */
   pagination?: Record<string, PaginationRuleRead | boolean>;
   auth?: TargetAuthenticationConfig;
   cli?: CliBehavior;
   mcp?: McpBehaviorRead;
   readme?: ReadmeBehavior;
   package?: PackageBehavior;
-  /** Format: uri */
+  /**
+   * The API's documentation site. Read through its llms.txt by the generated CLI's docs command,
+   * the MCP server's docs tools, and the package's AGENTS.md. Defaults to the Definition's
+   * externalDocs URL.
+   * Format: uri
+   */
   docs_url?: string | null;
-  /** Format: uri */
+  /**
+   * Exact llms.txt URL when the documentation site does not publish it at docs_url + /llms.txt.
+   * Format: uri
+   */
   docs_index_url?: string | null;
 }
 
@@ -2412,9 +2958,23 @@ export interface PaginationRuleRead {
 export interface FileStub {
   path: string;
   bytes: number;
+  mode: "100644" | "100755";
+}
+
+/** Response shape for FileStub. */
+export interface FileStubRead {
+  path: string;
+  bytes: number;
+  mode: ("100644" | "100755") | (string & {});
 }
 
+/**
+ * A Generation moves from queued to running, then succeeds when its files are saved or fails.
+ * Delivery and Draft status are separate.
+ */
 export const GenerationStatus = {
+  QUEUED: "queued",
+  RUNNING: "running",
   SUCCEEDED: "succeeded",
   FAILED: "failed",
 } as const;
@@ -2431,18 +2991,25 @@ export type GenerationTrigger = (typeof GenerationTrigger)[keyof typeof Generati
 export interface GenerationProvenance {
   /** Pinned generator contract edition. */
   generator_edition: string;
-  /** Exact engine build identifier used for replay and support. */
-  engine_build: string;
-  /**
-   * Immutable effective Target configuration used by this run; source credentials are never
-   * included.
-   */
-  resolved_config: Record<string, unknown> | null;
-  config_hash: string | null;
-  /** Resolved generator and entitlement plan used to select the emitted public surface. */
-  surface_plan: Record<string, unknown> | null;
-  surface_plan_hash: string | null;
-  entitlement_cap: number | null;
+  /**
+   * Recorded configuration for this Generation in the public Config format, including inherited
+   * Project defaults and Target overrides. Later edits do not change it. Source credentials are
+   * never included. Null when no configuration was recorded.
+   */
+  resolved_config: ConfigResponse | null;
+  package_version: string | null;
+}
+
+/** Response shape for GenerationProvenance. */
+export interface GenerationProvenanceRead {
+  /** Pinned generator contract edition. */
+  generator_edition: string;
+  /**
+   * Recorded configuration for this Generation in the public Config format, including inherited
+   * Project defaults and Target overrides. Later edits do not change it. Source credentials are
+   * never included. Null when no configuration was recorded.
+   */
+  resolved_config: ConfigResponseRead | null;
   package_version: string | null;
 }
 
@@ -2459,17 +3026,18 @@ export interface Generation {
   definition_revision_id: DefinitionRevisionId | null;
   status: GenerationStatus;
   trigger: GenerationTrigger;
-  /** Persisted Target identity. Null only for stateless generation. */
+  /** Persisted Target identity. Null only for one-shot generation. */
   target_id: TargetId | null;
   /** Resolved generator implementation; provenance rather than resource identity. */
   generator: GeneratorKind;
   provenance: GenerationProvenance;
-  /** Null only for a failed or legacy generation that produced no metadata. */
+  /** Null while queued or running, or when a failed or legacy generation produced no metadata. */
   meta: GenerationMeta | null;
   warnings: string[];
   /** Present on retrieve and create; omitted in lists. */
   files?: GeneratedFile[];
-  error: string | null;
+  /** Recorded failures. Empty when this resource has no recorded failure. */
+  errors: DomainError[];
   /** Format: date-time */
   created_at: string;
   request_id?: RequestId;
@@ -2488,17 +3056,18 @@ export interface GenerationWrite {
   definition_revision_id: DefinitionRevisionId | null;
   status: GenerationStatus;
   trigger: GenerationTrigger;
-  /** Persisted Target identity. Null only for stateless generation. */
+  /** Persisted Target identity. Null only for one-shot generation. */
   target_id: TargetId | null;
   /** Resolved generator implementation; provenance rather than resource identity. */
   generator: GeneratorKind;
   provenance: GenerationProvenance;
-  /** Null only for a failed or legacy generation that produced no metadata. */
+  /** Null while queued or running, or when a failed or legacy generation produced no metadata. */
   meta: GenerationMeta | null;
   warnings: string[];
   /** Present on retrieve and create; omitted in lists. */
   files?: GeneratedFile[];
-  error: string | null;
+  /** Recorded failures. Empty when this resource has no recorded failure. */
+  errors: DomainError[];
   /** Format: date-time */
   created_at: string;
   request_id?: RequestId;
@@ -2513,22 +3082,23 @@ export interface GenerationRead {
    * fetched one at a time via GET /generations/{generation_id}/file.
    */
   files_omitted?: boolean;
-  files_index?: FileStub[];
+  files_index?: FileStubRead[];
   project_id: ProjectId;
   definition_revision_id: DefinitionRevisionId | null;
   status: GenerationStatus | (string & {});
   trigger: GenerationTrigger | (string & {});
-  /** Persisted Target identity. Null only for stateless generation. */
+  /** Persisted Target identity. Null only for one-shot generation. */
   target_id: TargetId | null;
   /** Resolved generator implementation; provenance rather than resource identity. */
   generator: GeneratorKind | (string & {});
-  provenance: GenerationProvenance;
-  /** Null only for a failed or legacy generation that produced no metadata. */
+  provenance: GenerationProvenanceRead;
+  /** Null while queued or running, or when a failed or legacy generation produced no metadata. */
   meta: GenerationMetaRead | null;
   warnings: string[];
   /** Present on retrieve and create; omitted in lists. */
-  files?: GeneratedFile[];
-  error: string | null;
+  files?: GeneratedFileRead[];
+  /** Recorded failures. Empty when this resource has no recorded failure. */
+  errors: DomainErrorRead[];
   /** Format: date-time */
   created_at: string;
   request_id?: RequestId;
@@ -2545,7 +3115,7 @@ export interface GenerationSummary {
   definition_revision_id: DefinitionRevisionId | null;
   status: GenerationStatus;
   trigger: GenerationTrigger;
-  /** Persisted Target identity. Null only for stateless generation. */
+  /** Persisted Target identity. Null only for one-shot generation. */
   target_id: TargetId | null;
   /** Resolved generator implementation; provenance rather than resource identity. */
   generator: GeneratorKind;
@@ -2553,7 +3123,8 @@ export interface GenerationSummary {
   /** Null only for a failed or legacy generation that produced no metadata. */
   meta: GenerationMeta | null;
   warnings: string[];
-  error: string | null;
+  /** Recorded failures. Empty when this resource has no recorded failure. */
+  errors: DomainError[];
   /** Format: date-time */
   created_at: string;
 }
@@ -2565,7 +3136,7 @@ export interface GenerationSummaryWrite {
   definition_revision_id: DefinitionRevisionId | null;
   status: GenerationStatus;
   trigger: GenerationTrigger;
-  /** Persisted Target identity. Null only for stateless generation. */
+  /** Persisted Target identity. Null only for one-shot generation. */
   target_id: TargetId | null;
   /** Resolved generator implementation; provenance rather than resource identity. */
   generator: GeneratorKind;
@@ -2573,7 +3144,8 @@ export interface GenerationSummaryWrite {
   /** Null only for a failed or legacy generation that produced no metadata. */
   meta: GenerationMeta | null;
   warnings: string[];
-  error: string | null;
+  /** Recorded failures. Empty when this resource has no recorded failure. */
+  errors: DomainError[];
   /** Format: date-time */
   created_at: string;
 }
@@ -2586,15 +3158,16 @@ export interface GenerationSummaryRead {
   definition_revision_id: DefinitionRevisionId | null;
   status: GenerationStatus | (string & {});
   trigger: GenerationTrigger | (string & {});
-  /** Persisted Target identity. Null only for stateless generation. */
+  /** Persisted Target identity. Null only for one-shot generation. */
   target_id: TargetId | null;
   /** Resolved generator implementation; provenance rather than resource identity. */
   generator: GeneratorKind | (string & {});
-  provenance: GenerationProvenance;
+  provenance: GenerationProvenanceRead;
   /** Null only for a failed or legacy generation that produced no metadata. */
   meta: GenerationMetaRead | null;
   warnings: string[];
-  error: string | null;
+  /** Recorded failures. Empty when this resource has no recorded failure. */
+  errors: DomainErrorRead[];
   /** Format: date-time */
   created_at: string;
 }
@@ -2612,7 +3185,8 @@ export interface GenerationFailure {
   target_id: TargetId;
   generator: GeneratorKind;
   status: "failed";
-  error: string;
+  /** Recorded failures. Empty when this resource has no recorded failure. */
+  errors: DomainError[];
 }
 
 /** Response shape for GenerationFailure. */
@@ -2620,27 +3194,28 @@ export interface GenerationFailureRead {
   target_id: TargetId;
   generator: GeneratorKind | (string & {});
   status: "failed" | (string & {});
-  error: string;
+  /** Recorded failures. Empty when this resource has no recorded failure. */
+  errors: DomainErrorRead[];
 }
 
 /**
- * Metadata for each Target generation attempted by a Project run. Retrieve one Generation
- * separately for generated files.
+ * One Generation per selected Target. Retrieve each Generation for current status and generated
+ * files.
  */
 export interface GenerationBatch {
-  data: Array<GenerationSummary | GenerationFailure>;
+  data: GenerationSummary[];
   request_id: RequestId;
 }
 
 /** Request shape for GenerationBatch. */
 export interface GenerationBatchWrite {
-  data: Array<GenerationSummaryWrite | GenerationFailure>;
+  data: GenerationSummaryWrite[];
   request_id: RequestId;
 }
 
 /** Response shape for GenerationBatch. */
 export interface GenerationBatchRead {
-  data: Array<GenerationSummaryRead | GenerationFailureRead>;
+  data: GenerationSummaryRead[];
   request_id: RequestId;
 }
 
@@ -2693,7 +3268,7 @@ export interface UrlDefinitionRevisionSourceRead {
 
 export interface RepositoryDefinitionRevisionSource {
   kind: "repository";
-  repository: RepositoryReference;
+  repository: RepositoryReferenceResponse;
   /** Repository-relative Definition entrypoint path. */
   path: string;
   /** Git ref resolved for this revision, when recorded. */
@@ -2705,7 +3280,7 @@ export interface RepositoryDefinitionRevisionSource {
 /** Response shape for RepositoryDefinitionRevisionSource. */
 export interface RepositoryDefinitionRevisionSourceRead {
   kind: "repository" | (string & {});
-  repository: RepositoryReferenceRead;
+  repository: RepositoryReferenceResponseRead;
   /** Repository-relative Definition entrypoint path. */
   path: string;
   /** Git ref resolved for this revision, when recorded. */
@@ -2740,6 +3315,35 @@ export interface DefinitionDocumentRead {
   size_bytes: number;
 }
 
+export interface DefinitionDocumentResponse {
+  id: DefinitionDocumentId;
+  object: "definition_document";
+  definition_revision_id: DefinitionRevisionId;
+  role: "entrypoint" | "reference";
+  /** Repository-relative path or same-origin URL captured in this revision. */
+  coordinate: string;
+  sha256: string;
+  size_bytes: number;
+  /** Format: date-time */
+  created_at: string;
+  request_id: RequestId;
+}
+
+/** Response shape for DefinitionDocumentResponse. */
+export interface DefinitionDocumentResponseRead {
+  id: DefinitionDocumentId;
+  object: "definition_document" | (string & {});
+  definition_revision_id: DefinitionRevisionId;
+  role: ("entrypoint" | "reference") | (string & {});
+  /** Repository-relative path or same-origin URL captured in this revision. */
+  coordinate: string;
+  sha256: string;
+  size_bytes: number;
+  /** Format: date-time */
+  created_at: string;
+  request_id: RequestId;
+}
+
 export interface DefinitionRevision {
   id: DefinitionRevisionId;
   object: "definition_revision";
@@ -2920,6 +3524,7 @@ export const ErrorType = {
   SOURCE_ERROR: "source_error",
   RATE_LIMIT_ERROR: "rate_limit_error",
   API_ERROR: "api_error",
+  UNKNOWN_ERROR: "unknown_error",
 } as const;
 export type ErrorType = (typeof ErrorType)[keyof typeof ErrorType];
 
@@ -2932,13 +3537,18 @@ export const ErrorCode = {
   INSUFFICIENT_SCOPE: "insufficient_scope",
   FORBIDDEN: "forbidden",
   NOT_FOUND: "not_found",
+  METHOD_NOT_ALLOWED: "method_not_allowed",
   SPEC_ERROR: "spec_error",
   FETCH_ERROR: "fetch_error",
   REPOSITORY_PROVIDER_UNSUPPORTED: "repository_provider_unsupported",
   EDITION_UNAVAILABLE: "edition_unavailable",
   TARGET_BUSY: "target_busy",
+  NO_DRAFT: "no_draft",
+  STALE_DRAFT: "stale_draft",
+  NO_CHANGES: "no_changes",
   INVALID_VERSION: "invalid_version",
-  STALE_RELEASE_REVISION: "stale_release_revision",
+  PRECONDITION_FAILED: "precondition_failed",
+  DEFINITION_CHANGED: "definition_changed",
   VERSION_OCCUPIED: "version_occupied",
   VERSION_TOO_LOW: "version_too_low",
   RELEASE_ANALYSIS_STALE: "release_analysis_stale",
@@ -2956,17 +3566,51 @@ export const ErrorCode = {
   PAYLOAD_TOO_LARGE: "payload_too_large",
   RATE_LIMITED: "rate_limited",
   INTERNAL_ERROR: "internal_error",
+  DEPENDENCY_MISSING: "dependency_missing",
+  DEPENDENCY_NOT_FOUND: "dependency_not_found",
+  DEPENDENCY_SELF: "dependency_self",
+  DEPENDENCY_CYCLE: "dependency_cycle",
+  DEPENDENCY_CROSS_PROJECT: "dependency_cross_project",
+  DEPENDENCY_CROSS_LINEAGE: "dependency_cross_lineage",
+  DEPENDENCY_WRONG_GENERATOR: "dependency_wrong_generator",
+  DEPENDENCY_DISABLED: "dependency_disabled",
+  DEPENDENCY_MODULE_PATH_MISSING: "dependency_module_path_missing",
+  DEPENDENCY_UNRELEASED: "dependency_unreleased",
+  DEPENDENCY_REVISION_MISMATCH: "dependency_revision_mismatch",
+  DEPENDENCY_EDITION_INCOMPATIBLE: "dependency_edition_incompatible",
+  PUBLICATION_FAILED: "publication_failed",
+  CUSTOMIZATION_CONFLICT: "customization_conflict",
+  HISTORY_RECOVERY_REQUIRED: "history_recovery_required",
+  CHECKS_UNAVAILABLE: "checks_unavailable",
+  GENERATION_STALE: "generation_stale",
+  UNCLASSIFIED_ERROR: "unclassified_error",
 } as const;
 export type ErrorCode = (typeof ErrorCode)[keyof typeof ErrorCode];
 
 export interface ErrorDetail {
   type: ErrorType;
   code: ErrorCode;
-  /** JSON Pointer to the invalid request field, when one field caused the error. */
+  phase?: FailurePhase;
+  /** The affected Target when an operation reports failures for multiple Targets. */
+  target_id?: TargetId;
+  /**
+   * JSON Pointer to the invalid field within the request part named by in. When in is omitted, the
+   * pointer refers to the request body. Header pointers use lowercase header names, such as
+   * /idempotency-key.
+   */
   field?: string;
+  /**
+   * Request part containing field. Query-parameter errors use query; header errors use header. Body
+   * errors use body or omit in.
+   */
+  in?: "body" | "query" | "header";
   /** Human-readable explanation. Its wording may change. */
   message: string;
-  /** Whether retrying later can succeed without changing the request. */
+  /**
+   * Whether another attempt can succeed without correcting the inputs. For a recorded failure,
+   * start generation or publication again; retrieving the resource or replaying an idempotency key
+   * does not start another attempt.
+   */
   retryable: boolean;
   /** Stable, concise recovery instruction suitable for a person or agent. */
   suggested_action: string;
@@ -2981,11 +3625,27 @@ export interface ErrorDetail {
 export interface ErrorDetailRead {
   type: ErrorType | (string & {});
   code: ErrorCode | (string & {});
-  /** JSON Pointer to the invalid request field, when one field caused the error. */
+  phase?: FailurePhase | (string & {});
+  /** The affected Target when an operation reports failures for multiple Targets. */
+  target_id?: TargetId;
+  /**
+   * JSON Pointer to the invalid field within the request part named by in. When in is omitted, the
+   * pointer refers to the request body. Header pointers use lowercase header names, such as
+   * /idempotency-key.
+   */
   field?: string;
+  /**
+   * Request part containing field. Query-parameter errors use query; header errors use header. Body
+   * errors use body or omit in.
+   */
+  in?: ("body" | "query" | "header") | (string & {});
   /** Human-readable explanation. Its wording may change. */
   message: string;
-  /** Whether retrying later can succeed without changing the request. */
+  /**
+   * Whether another attempt can succeed without correcting the inputs. For a recorded failure,
+   * start generation or publication again; retrieving the resource or replaying an idempotency key
+   * does not start another attempt.
+   */
   retryable: boolean;
   /** Stable, concise recovery instruction suitable for a person or agent. */
   suggested_action: string;
@@ -2996,13 +3656,1304 @@ export interface ErrorDetailRead {
   docs_url: string;
 }
 
-export interface ErrorModel {
-  errors: ErrorDetail[];
-  request_id: RequestId;
+export interface RepositoryReferenceResponse {
+  /** GitHub is the only launch provider; the field is stable for future adapters. */
+  provider: "github";
+  /** Provider-native repository identity, opaque outside its adapter. */
+  identifier: string;
 }
 
-/** Response shape for ErrorModel. */
-export interface ErrorModelRead {
-  errors: ErrorDetailRead[];
-  request_id: RequestId;
+/** Response shape for RepositoryReferenceResponse. */
+export interface RepositoryReferenceResponseRead {
+  /** GitHub is the only launch provider; the field is stable for future adapters. */
+  provider: "github" | (string & {});
+  /** Provider-native repository identity, opaque outside its adapter. */
+  identifier: string;
+}
+
+/**
+ * A fix applied to the resolved Definition before generation. Paths are JSON
+ * Pointers into the document. A patch whose target no longer exists is
+ * skipped and reported as a warning on the generation, never silently.
+ */
+export interface DefinitionPatchResponse {
+  op: "set" | "append" | "remove" | "rename";
+  /**
+   * JSON-Pointer-style path. Pattern segments enable bulk fixes:
+   * * (any child), ** (any depth), [key=value] (filter), e.g.
+   * /paths/**\/parameters/[name=account_id]/schema/type. Renaming a
+   * schema under /components/schemas also rewrites its $refs.
+   */
+  path: string;
+  /** set only; the replacement value. */
+  value?: unknown;
+  /** rename only; the new key name. */
+  to?: string | null;
+  reason?: string | null;
+}
+
+/** Response shape for DefinitionPatchResponse. */
+export interface DefinitionPatchResponseRead {
+  op: ("set" | "append" | "remove" | "rename") | (string & {});
+  /**
+   * JSON-Pointer-style path. Pattern segments enable bulk fixes:
+   * * (any child), ** (any depth), [key=value] (filter), e.g.
+   * /paths/**\/parameters/[name=account_id]/schema/type. Renaming a
+   * schema under /components/schemas also rewrites its $refs.
+   */
+  path: string;
+  /** set only; the replacement value. */
+  value?: unknown;
+  /** rename only; the new key name. */
+  to?: string | null;
+  reason?: string | null;
+}
+
+export interface DiagnosticSuppressionResponse {
+  rule_id: string;
+  /** Exact schema coordinate. Omit only to suppress every occurrence of the rule. */
+  path?: string;
+  /** The reviewed product decision behind this exception. */
+  reason: string;
+}
+
+/**
+ * Source pull-request enforcement threshold, new-versus-complete baseline, and explicitly reviewed
+ * rule or location exceptions.
+ */
+export interface DiagnosticPolicyResponse {
+  /**
+   * Severity threshold that fails the API change review check.
+   * Default: "error"
+   */
+  fail_on: "never" | "error" | "warning";
+  /**
+   * Enforce only occurrences introduced by the proposed source change.
+   * Default: true
+   */
+  only_new: boolean;
+  /** Default: [] */
+  suppressions: DiagnosticSuppressionResponse[];
+}
+
+/** Response shape for DiagnosticPolicyResponse. */
+export interface DiagnosticPolicyResponseRead {
+  /**
+   * Severity threshold that fails the API change review check.
+   * Default: "error"
+   */
+  fail_on: ("never" | "error" | "warning") | (string & {});
+  /**
+   * Enforce only occurrences introduced by the proposed source change.
+   * Default: true
+   */
+  only_new: boolean;
+  /** Default: [] */
+  suppressions: DiagnosticSuppressionResponse[];
+}
+
+/**
+ * Required checks run against the complete combined package. Generated checks and customer commands
+ * share one reproducible workflow; repository_required names existing repository checks. Supplying
+ * checks replaces all settings. Omitted generated restores build, package, and public_entrypoint;
+ * omitted repository_required and customer restore empty lists. An empty object restores these
+ * defaults. An empty array clears the corresponding list.
+ */
+export interface TargetChecksResponse {
+  /** Default: ["build","package","public_entrypoint"] */
+  generated?: Array<"build" | "package" | "public_entrypoint">;
+  repository_required?: string[];
+  customer?: Array<{
+    name: string;
+    command: string;
+  }>;
+}
+
+/** Response shape for TargetChecksResponse. */
+export interface TargetChecksResponseRead {
+  /** Default: ["build","package","public_entrypoint"] */
+  generated?: Array<("build" | "package" | "public_entrypoint") | (string & {})>;
+  repository_required?: string[];
+  customer?: Array<{
+    name: string;
+    command: string;
+  }>;
+}
+
+/**
+ * Authorization-server metadata used by generated OAuth flows. Secrets and runtime credentials are
+ * never accepted here.
+ */
+export interface OAuthServerResponse {
+  /**
+   * Exact authorization-server issuer, including any tenant path.
+   * Format: uri
+   */
+  issuer?: string | null;
+  /**
+   * Exact metadata URL when it cannot be derived from the issuer.
+   * Format: uri
+   */
+  discovery_url?: string | null;
+  /**
+   * Authorization endpoint override.
+   * Format: uri
+   */
+  authorization_url?: string | null;
+  /**
+   * Token endpoint override.
+   * Format: uri
+   */
+  token_url?: string | null;
+  /**
+   * Device-authorization endpoint override.
+   * Format: uri
+   */
+  device_authorization_url?: string | null;
+  /** Default scopes requested during login. */
+  scopes?: string[] | null;
+  /** Default audience included in authorization and token requests. */
+  audience?: string | null;
+  /**
+   * Protected API resource included in authorization and token requests.
+   * Format: uri
+   */
+  resource?: string | null;
+}
+
+/**
+ * OAuth application available to generated products. Public clients support interactive login;
+ * confidential clients support runtime-supplied machine credentials. Client secrets are never
+ * stored.
+ */
+export interface OAuthApplicationResponse {
+  /** OAuth client identifier. */
+  client_id: string;
+  /** Interactive login method. Browser login uses Authorization Code with PKCE. */
+  login_method?: "browser" | "device" | null;
+  /** How a runtime-supplied client secret is sent for machine grants. */
+  client_auth_method?: "post" | "basic" | null;
+  /**
+   * Loopback callback URL for browser login.
+   * Format: uri
+   */
+  redirect_uri?: string | null;
+  /** Provider parameter used to request an organization during browser login. */
+  organization_parameter?: "organization" | "organization_id" | null;
 }
+
+/** Response shape for OAuthApplicationResponse. */
+export interface OAuthApplicationResponseRead {
+  /** OAuth client identifier. */
+  client_id: string;
+  /** Interactive login method. Browser login uses Authorization Code with PKCE. */
+  login_method?: ("browser" | "device" | null) | (string & {}) | null;
+  /** How a runtime-supplied client secret is sent for machine grants. */
+  client_auth_method?: ("post" | "basic" | null) | (string & {}) | null;
+  /**
+   * Loopback callback URL for browser login.
+   * Format: uri
+   */
+  redirect_uri?: string | null;
+  /** Provider parameter used to request an organization during browser login. */
+  organization_parameter?: ("organization" | "organization_id" | null) | (string & {}) | null;
+}
+
+/**
+ * Authenticated identity read used to verify a login before it is saved. Operation is auto-detected
+ * when omitted or null. At least one of subject_field, account_field, or organization_field must be
+ * a non-null JSON Pointer. Null clears an individual mapping while another remains. Set
+ * identity_verification itself to null to remove the whole policy.
+ */
+export type IdentityVerificationResponse = {
+  /** resource.method of a safe identity read with no required arguments. */
+  operation?: string | null;
+  /** JSON Pointer to the stable caller ID in the identity response. */
+  subject_field?: string | null;
+  /** JSON Pointer to the customer account ID. */
+  account_field?: string | null;
+  /** JSON Pointer to the customer organization ID. */
+  organization_field?: string | null;
+} & ({
+  subject_field: string;
+}
+  | {
+      account_field: string;
+    }
+  | {
+      organization_field: string;
+    });
+
+/** OAuth application and request-value overrides for one named API environment. */
+export interface AuthenticationEnvironmentResponse {
+  oauth_application?: string | null;
+  scopes?: string[] | null;
+  audience?: string | null;
+  /** Format: uri */
+  resource?: string | null;
+}
+
+/**
+ * Public authentication defaults for generated clients and tools. Stored Projects own the OAuth
+ * server, application catalog, and identity policy; one-shot generation accepts the same shape for
+ * one run. Runtime credentials and client secrets are never accepted.
+ */
+export interface AuthenticationConfigResponse {
+  oauth_server?: OAuthServerResponse | null;
+  /** OAuth applications keyed by a stable name. */
+  oauth_applications?: Record<string, OAuthApplicationResponse> | null;
+  /** Default OAuth application used by generated products. */
+  oauth_application?: string | null;
+  identity_verification?: IdentityVerificationResponse | null;
+  /**
+   * Base URL of a custom browser-approval backend implementing the start, status, and revoke
+   * contract. Used only when OAuth is not configured.
+   * Format: uri
+   */
+  approval_url?: string | null;
+  /** Authentication selections keyed by generated API environment name. */
+  environments?: Record<string, AuthenticationEnvironmentResponse> | null;
+}
+
+export interface TargetAuthenticationEnvironmentResponse {
+  oauth_application?: string | null;
+}
+
+/**
+ * Selects a Project OAuth application for one Target. OAuth server metadata, applications, and
+ * identity policy remain Project-owned.
+ */
+export interface TargetAuthenticationConfigResponse {
+  /** Project OAuth application to use. Omit to inherit the Project default. */
+  oauth_application?: string | null;
+  /** Project OAuth application selections keyed by API environment. */
+  environments?: Record<string, TargetAuthenticationEnvironmentResponse> | null;
+}
+
+/** How the generated CLI behaves. Part of Config. */
+export interface CliBehaviorResponse {
+  /** Command users run, independent of how the CLI is distributed. */
+  command_name?: string | null;
+  /**
+   * Opt in to a once-a-day registry check that prints an upgrade hint. Off by default; generated
+   * code phones nobody unless this is enabled.
+   */
+  update_notice?: boolean;
+  /**
+   * Public HTTP(S) URL read by the optional changelog command in generated CLIs. Supports UTF-8
+   * Markdown, plain text, and static HTML; embedded credentials are not allowed. Omit or clear to
+   * disable, then regenerate.
+   */
+  changelog_url?: string | null;
+  /**
+   * Where the generated CLI's feedback command sends users. GitHub issues/new URLs get a prefilled
+   * title and environment details.
+   */
+  support_url?: string | null;
+  /**
+   * Hosted MCP endpoint installed by the generated CLI instead of launching the package's local
+   * stdio server.
+   */
+  mcp_url?: string | null;
+  /** GitHub owner/name of the skills package the generated CLI offers to install during init. */
+  skills_repo?: string | null;
+}
+
+/** How generated MCP servers and the Typeship-hosted endpoint behave. Part of Config. */
+export interface McpBehaviorResponse {
+  /** Stable official MCP registry name, independent of the server runtime. */
+  registry_name?: string | null;
+  /**
+   * Authorization for callers connecting to a generated MCP server deployed over HTTP. The hosting
+   * application resolves upstream API credentials separately at runtime. This setting does not
+   * apply to the Typeship-hosted endpoint.
+   */
+  access?: {
+    /**
+     * Exact issuer allowed to sign MCP connection tokens.
+     * Format: uri
+     */
+    issuer: string;
+    /**
+     * Canonical public URL of the self-hosted MCP endpoint that connection tokens must target.
+     * Format: uri
+     */
+    resource: string;
+    /**
+     * Public signing-key endpoint. Omit to discover it from the issuer.
+     * Format: uri
+     */
+    jwks_url?: string;
+    /** Minimum scopes required to connect to the self-hosted MCP server. */
+    scopes?: string[];
+  };
+  /**
+   * MCP tool shape. meta collapses per-operation tools into search_docs, read_docs, and execute so
+   * large APIs don't flood an agent's context window. Auto considers the serialized tool schemas,
+   * switching near 10k tokens or above 100 operations.
+   */
+  tool_mode?: "auto" | "operations" | "meta";
+  /**
+   * Guidance appended to the MCP server's instructions, which agents read once when they connect
+   * (server/discover): what to call first, conventions the spec does not state, what not to do.
+   * Carried by the package's server and the hosted endpoint alike.
+   */
+  instructions?: string | null;
+  /**
+   * Hand-written MCP tool descriptions keyed by operationId or "METHOD /path". Each replaces the
+   * text typeship derives for that operation (summary, first sentence, method and path, deprecation
+   * and auth notes). For flows the spec cannot describe, such as a multi-step upload. Keys that
+   * match no operation are reported as generation warnings.
+   */
+  tool_descriptions?: Record<string, string>;
+  /**
+   * Exact name-or-ID resolver overrides keyed first by the target operationId or "METHOD /path",
+   * then by its wire argument name. A resolver names one read collection operation plus 1-4 item
+   * fields to match case-insensitively; false opts that argument out of strict inference.
+   */
+  reference_resolvers?: Record<string, Record<string, false
+    | {
+        /** OperationId, "METHOD /path", MCP tool name, or dotted resource.method of the list operation. */
+        via: string;
+        /** Item fields compared exactly and case-insensitively, such as name, slug, key, or email. */
+        match: string[];
+        /** Item field substituted into the requested argument. Defaults to id. */
+        id?: string;
+      }>>;
+}
+
+/** Response shape for McpBehaviorResponse. */
+export interface McpBehaviorResponseRead {
+  /** Stable official MCP registry name, independent of the server runtime. */
+  registry_name?: string | null;
+  /**
+   * Authorization for callers connecting to a generated MCP server deployed over HTTP. The hosting
+   * application resolves upstream API credentials separately at runtime. This setting does not
+   * apply to the Typeship-hosted endpoint.
+   */
+  access?: {
+    /**
+     * Exact issuer allowed to sign MCP connection tokens.
+     * Format: uri
+     */
+    issuer: string;
+    /**
+     * Canonical public URL of the self-hosted MCP endpoint that connection tokens must target.
+     * Format: uri
+     */
+    resource: string;
+    /**
+     * Public signing-key endpoint. Omit to discover it from the issuer.
+     * Format: uri
+     */
+    jwks_url?: string;
+    /** Minimum scopes required to connect to the self-hosted MCP server. */
+    scopes?: string[];
+  };
+  /**
+   * MCP tool shape. meta collapses per-operation tools into search_docs, read_docs, and execute so
+   * large APIs don't flood an agent's context window. Auto considers the serialized tool schemas,
+   * switching near 10k tokens or above 100 operations.
+   */
+  tool_mode?: ("auto" | "operations" | "meta") | (string & {});
+  /**
+   * Guidance appended to the MCP server's instructions, which agents read once when they connect
+   * (server/discover): what to call first, conventions the spec does not state, what not to do.
+   * Carried by the package's server and the hosted endpoint alike.
+   */
+  instructions?: string | null;
+  /**
+   * Hand-written MCP tool descriptions keyed by operationId or "METHOD /path". Each replaces the
+   * text typeship derives for that operation (summary, first sentence, method and path, deprecation
+   * and auth notes). For flows the spec cannot describe, such as a multi-step upload. Keys that
+   * match no operation are reported as generation warnings.
+   */
+  tool_descriptions?: Record<string, string>;
+  /**
+   * Exact name-or-ID resolver overrides keyed first by the target operationId or "METHOD /path",
+   * then by its wire argument name. A resolver names one read collection operation plus 1-4 item
+   * fields to match case-insensitively; false opts that argument out of strict inference.
+   */
+  reference_resolvers?: Record<string, Record<string, false | (string & {})
+    | {
+        /** OperationId, "METHOD /path", MCP tool name, or dotted resource.method of the list operation. */
+        via: string;
+        /** Item fields compared exactly and case-insensitively, such as name, slug, key, or email. */
+        match: string[];
+        /** Item field substituted into the requested argument. Defaults to id. */
+        id?: string;
+      }>>;
+}
+
+/** Generated README behavior. Part of Config. */
+export interface ReadmeBehaviorResponse {
+  /**
+   * operationId or "METHOD /path" to feature as the README's first API call. It must be present in
+   * the generated package and callable with no required input beyond path placeholders. Missing or
+   * unsuitable choices produce a warning and use the automatic example.
+   */
+  quickstart_operation?: string | null;
+}
+
+/**
+ * Published-package metadata the API spec does not own. Repository is derived from each
+ * destination.
+ */
+export interface PackageBehaviorResponse {
+  /** Homepage written into registry metadata. */
+  homepage?: string | null;
+  /** SPDX identifier written into registry metadata. Defaults to info.license. */
+  license?: string | null;
+  /**
+   * Exact LICENSE file contents. Supply this for licences the engine does not build in; MIT is
+   * built in when copyright is also set.
+   */
+  license_text?: string | null;
+  /** Copyright line used in generated license files. */
+  copyright?: string | null;
+  /** Go identifier when the destination repository name is unsuitable. */
+  go_package_name?: string | null;
+}
+
+/**
+ * Everything Typeship needs beyond the Definition, in one object: generation customization
+ * (globals, retries, pagination, readme) and how the generated tooling behaves (cli, mcp, package,
+ * docs_url). Plain configuration. Typeship never requires vendor extensions inside the Definition
+ * itself. One-shot generation also accepts GraphQL settings here; stored projects keep those
+ * settings on their Definition.
+ */
+export interface ConfigResponse {
+  /**
+   * Wire names of query/header parameters that become settable once on the generated client and
+   * auto-apply to every operation that accepts them; per-call values win. Names that match nothing
+   * are reported as generation warnings.
+   */
+  globals?: string[];
+  retries?: RetryTuningResponse;
+  /**
+   * Per-operation pagination control, keyed by operationId or "METHOD /path". Unmatched keys are
+   * reported as generation warnings.
+   */
+  pagination?: Record<string, PaginationRuleResponse | boolean>;
+  graphql?: GraphqlSettingsResponse;
+  auth?: AuthenticationConfigResponse;
+  cli?: CliBehaviorResponse;
+  mcp?: McpBehaviorResponse;
+  readme?: ReadmeBehaviorResponse;
+  package?: PackageBehaviorResponse;
+  /**
+   * The API's documentation site. Read through its llms.txt by the generated CLI's docs command,
+   * the MCP server's docs tools, and the package's AGENTS.md. Defaults to the Definition's
+   * externalDocs URL.
+   * Format: uri
+   */
+  docs_url?: string | null;
+  /**
+   * Exact llms.txt URL when the documentation site does not publish it at docs_url + /llms.txt.
+   * Format: uri
+   */
+  docs_index_url?: string | null;
+}
+
+/** Response shape for ConfigResponse. */
+export interface ConfigResponseRead {
+  /**
+   * Wire names of query/header parameters that become settable once on the generated client and
+   * auto-apply to every operation that accepts them; per-call values win. Names that match nothing
+   * are reported as generation warnings.
+   */
+  globals?: string[];
+  retries?: RetryTuningResponse;
+  /**
+   * Per-operation pagination control, keyed by operationId or "METHOD /path". Unmatched keys are
+   * reported as generation warnings.
+   */
+  pagination?: Record<string, PaginationRuleResponseRead | boolean>;
+  graphql?: GraphqlSettingsResponseRead;
+  auth?: AuthenticationConfigResponse;
+  cli?: CliBehaviorResponse;
+  mcp?: McpBehaviorResponseRead;
+  readme?: ReadmeBehaviorResponse;
+  package?: PackageBehaviorResponse;
+  /**
+   * The API's documentation site. Read through its llms.txt by the generated CLI's docs command,
+   * the MCP server's docs tools, and the package's AGENTS.md. Defaults to the Definition's
+   * externalDocs URL.
+   * Format: uri
+   */
+  docs_url?: string | null;
+  /**
+   * Exact llms.txt URL when the documentation site does not publish it at docs_url + /llms.txt.
+   * Format: uri
+   */
+  docs_index_url?: string | null;
+}
+
+/**
+ * Shared generated-client and tooling behavior for a stored Project. Every Target inherits these
+ * defaults. Target.config is merged over them for one Target; top-level values replace defaults
+ * while cli, mcp, auth, readme, and package merge by field. GraphQL-only source settings live on
+ * the Project's Definition and are rejected in both stored config scopes.
+ */
+export interface ProjectConfigResponse {
+  /**
+   * Wire names of query/header parameters that become settable once on the generated client and
+   * auto-apply to every operation that accepts them; per-call values win. Names that match nothing
+   * are reported as generation warnings.
+   */
+  globals?: string[];
+  retries?: RetryTuningResponse;
+  /**
+   * Per-operation pagination control, keyed by operationId or "METHOD /path". Unmatched keys are
+   * reported as generation warnings.
+   */
+  pagination?: Record<string, PaginationRuleResponse | boolean>;
+  auth?: AuthenticationConfigResponse;
+  cli?: CliBehaviorResponse;
+  mcp?: McpBehaviorResponse;
+  readme?: ReadmeBehaviorResponse;
+  package?: PackageBehaviorResponse;
+  /**
+   * The API's documentation site. Read through its llms.txt by the generated CLI's docs command,
+   * the MCP server's docs tools, and the package's AGENTS.md. Defaults to the Definition's
+   * externalDocs URL.
+   * Format: uri
+   */
+  docs_url?: string | null;
+  /**
+   * Exact llms.txt URL when the documentation site does not publish it at docs_url + /llms.txt.
+   * Format: uri
+   */
+  docs_index_url?: string | null;
+}
+
+/** Response shape for ProjectConfigResponse. */
+export interface ProjectConfigResponseRead {
+  /**
+   * Wire names of query/header parameters that become settable once on the generated client and
+   * auto-apply to every operation that accepts them; per-call values win. Names that match nothing
+   * are reported as generation warnings.
+   */
+  globals?: string[];
+  retries?: RetryTuningResponse;
+  /**
+   * Per-operation pagination control, keyed by operationId or "METHOD /path". Unmatched keys are
+   * reported as generation warnings.
+   */
+  pagination?: Record<string, PaginationRuleResponseRead | boolean>;
+  auth?: AuthenticationConfigResponse;
+  cli?: CliBehaviorResponse;
+  mcp?: McpBehaviorResponseRead;
+  readme?: ReadmeBehaviorResponse;
+  package?: PackageBehaviorResponse;
+  /**
+   * The API's documentation site. Read through its llms.txt by the generated CLI's docs command,
+   * the MCP server's docs tools, and the package's AGENTS.md. Defaults to the Definition's
+   * externalDocs URL.
+   * Format: uri
+   */
+  docs_url?: string | null;
+  /**
+   * Exact llms.txt URL when the documentation site does not publish it at docs_url + /llms.txt.
+   * Format: uri
+   */
+  docs_index_url?: string | null;
+}
+
+/**
+ * Target-specific generation and delivery overrides. Authentication may only select a Project-owned
+ * OAuth application. OAuth server metadata, applications, and identity policy remain Project-owned.
+ * Self-hosted MCP access may be overridden for a Target-specific deployment.
+ */
+export interface TargetConfigResponse {
+  /**
+   * Wire names of query/header parameters that become settable once on the generated client and
+   * auto-apply to every operation that accepts them; per-call values win. Names that match nothing
+   * are reported as generation warnings.
+   */
+  globals?: string[];
+  retries?: RetryTuningResponse;
+  /**
+   * Per-operation pagination control, keyed by operationId or "METHOD /path". Unmatched keys are
+   * reported as generation warnings.
+   */
+  pagination?: Record<string, PaginationRuleResponse | boolean>;
+  auth?: TargetAuthenticationConfigResponse;
+  cli?: CliBehaviorResponse;
+  mcp?: McpBehaviorResponse;
+  readme?: ReadmeBehaviorResponse;
+  package?: PackageBehaviorResponse;
+  /**
+   * The API's documentation site. Read through its llms.txt by the generated CLI's docs command,
+   * the MCP server's docs tools, and the package's AGENTS.md. Defaults to the Definition's
+   * externalDocs URL.
+   * Format: uri
+   */
+  docs_url?: string | null;
+  /**
+   * Exact llms.txt URL when the documentation site does not publish it at docs_url + /llms.txt.
+   * Format: uri
+   */
+  docs_index_url?: string | null;
+}
+
+/** Response shape for TargetConfigResponse. */
+export interface TargetConfigResponseRead {
+  /**
+   * Wire names of query/header parameters that become settable once on the generated client and
+   * auto-apply to every operation that accepts them; per-call values win. Names that match nothing
+   * are reported as generation warnings.
+   */
+  globals?: string[];
+  retries?: RetryTuningResponse;
+  /**
+   * Per-operation pagination control, keyed by operationId or "METHOD /path". Unmatched keys are
+   * reported as generation warnings.
+   */
+  pagination?: Record<string, PaginationRuleResponseRead | boolean>;
+  auth?: TargetAuthenticationConfigResponse;
+  cli?: CliBehaviorResponse;
+  mcp?: McpBehaviorResponseRead;
+  readme?: ReadmeBehaviorResponse;
+  package?: PackageBehaviorResponse;
+  /**
+   * The API's documentation site. Read through its llms.txt by the generated CLI's docs command,
+   * the MCP server's docs tools, and the package's AGENTS.md. Defaults to the Definition's
+   * externalDocs URL.
+   * Format: uri
+   */
+  docs_url?: string | null;
+  /**
+   * Exact llms.txt URL when the documentation site does not publish it at docs_url + /llms.txt.
+   * Format: uri
+   */
+  docs_index_url?: string | null;
+}
+
+/** What a GraphQL schema cannot say about itself. Ignored for OpenAPI specs. */
+export interface GraphqlSettingsResponse {
+  /**
+   * The URL every request is POSTed to; the generated client's default baseUrl. Defaults to the URL
+   * the schema was fetched from. Without either, baseUrl is a required client option.
+   * Format: uri
+   */
+  endpoint?: string;
+  /**
+   * Named endpoints (sandbox, production). Each becomes a client environment; the first is the
+   * default unless endpoint is set.
+   */
+  environments?: Array<{
+    name: string;
+    /** Format: uri */
+    url: string;
+  }>;
+  /**
+   * How requests authenticate. bearer sends Authorization: Bearer; basic is for key-pair APIs
+   * (public key as username, private key as password); api_key sends a header named by
+   * api_key_header; none generates no auth option.
+   * Default: "bearer"
+   */
+  auth?: "bearer" | "basic" | "api_key" | "none";
+  /**
+   * Header carrying the key when auth is api_key. Required for that mode; Typeship does not invent
+   * a vendor-specific header name.
+   */
+  api_key_header?: string;
+  /**
+   * The API's name; drives the package and client names ("Acme" gives acme and AcmeClient).
+   * Defaults to a name derived from the endpoint's host.
+   */
+  title?: string;
+  /**
+   * JSON representation of each custom scalar, keyed by GraphQL scalar name. Unmapped scalars
+   * generate as the language's untyped JSON value and produce a warning. Unmatched keys warn.
+   */
+  scalars?: Record<string, "string" | "integer" | "number" | "boolean" | "json">;
+}
+
+/** Response shape for GraphqlSettingsResponse. */
+export interface GraphqlSettingsResponseRead {
+  /**
+   * The URL every request is POSTed to; the generated client's default baseUrl. Defaults to the URL
+   * the schema was fetched from. Without either, baseUrl is a required client option.
+   * Format: uri
+   */
+  endpoint?: string;
+  /**
+   * Named endpoints (sandbox, production). Each becomes a client environment; the first is the
+   * default unless endpoint is set.
+   */
+  environments?: Array<{
+    name: string;
+    /** Format: uri */
+    url: string;
+  }>;
+  /**
+   * How requests authenticate. bearer sends Authorization: Bearer; basic is for key-pair APIs
+   * (public key as username, private key as password); api_key sends a header named by
+   * api_key_header; none generates no auth option.
+   * Default: "bearer"
+   */
+  auth?: ("bearer" | "basic" | "api_key" | "none") | (string & {});
+  /**
+   * Header carrying the key when auth is api_key. Required for that mode; Typeship does not invent
+   * a vendor-specific header name.
+   */
+  api_key_header?: string;
+  /**
+   * The API's name; drives the package and client names ("Acme" gives acme and AcmeClient).
+   * Defaults to a name derived from the endpoint's host.
+   */
+  title?: string;
+  /**
+   * JSON representation of each custom scalar, keyed by GraphQL scalar name. Unmapped scalars
+   * generate as the language's untyped JSON value and produce a warning. Unmatched keys warn.
+   */
+  scalars?: Record<string, ("string" | "integer" | "number" | "boolean" | "json") | (string & {})>;
+}
+
+/**
+ * Retry behavior. Top-level fields adjust every operation; operations maps operationId or "METHOD
+ * /path" keys to per-operation overrides.
+ */
+export interface RetryTuningResponse {
+  max_retries?: number;
+  /** Replaces the default retryable set (408, 429, 500, 502, 503, 504). */
+  statuses?: number[];
+  initial_delay_ms?: number;
+  max_delay_ms?: number;
+  /** Also retry non-idempotent methods (POST/PATCH). */
+  retry_non_idempotent?: boolean;
+  /** Shorthand for max_retries 0. */
+  disabled?: boolean;
+  operations?: Record<string, RetryTuningResponse>;
+}
+
+export interface PaginationRuleResponse {
+  /** Default: "cursor" */
+  style?: "cursor" | "cursorFromLastId" | "page" | "offset";
+  /** Response field holding the item array. */
+  items_field: string;
+  cursor_param?: string;
+  next_cursor_field?: string;
+  has_more_field?: string;
+  id_field?: string;
+  page_param?: string;
+  offset_param?: string;
+  limit_param?: string;
+}
+
+/** Response shape for PaginationRuleResponse. */
+export interface PaginationRuleResponseRead {
+  /** Default: "cursor" */
+  style?: ("cursor" | "cursorFromLastId" | "page" | "offset") | (string & {});
+  /** Response field holding the item array. */
+  items_field: string;
+  cursor_param?: string;
+  next_cursor_field?: string;
+  has_more_field?: string;
+  id_field?: string;
+  page_param?: string;
+  offset_param?: string;
+  limit_param?: string;
+}
+
+export interface ErrorModel {
+  errors: ErrorDetail[];
+  request_id: RequestId;
+}
+
+/** Response shape for ErrorModel. */
+export interface ErrorModelRead {
+  errors: ErrorDetailRead[];
+  request_id: RequestId;
+}
+
+/** Git file mode. 100755 is executable; 120000 is a symbolic link whose content is its target. */
+export const GitFileMode = {
+  V_100644: "100644",
+  V_100755: "100755",
+  V_120000: "120000",
+} as const;
+export type GitFileMode = (typeof GitFileMode)[keyof typeof GitFileMode];
+
+/**
+ * One side of a Draft file comparison. A conflict has base (the common version before both
+ * changes), repository (the file on the Draft), and incoming (the file the merge brings in). A
+ * default-branch history rewrite has accepted (the last accepted package), default (the rewritten
+ * default branch), and draft (the current Draft branch).
+ */
+export const DraftFileSide = {
+  BASE: "base",
+  REPOSITORY: "repository",
+  INCOMING: "incoming",
+  ACCEPTED: "accepted",
+  DEFAULT: "default",
+  DRAFT: "draft",
+} as const;
+export type DraftFileSide = (typeof DraftFileSide)[keyof typeof DraftFileSide];
+
+export interface DraftFileSideSummary {
+  side: DraftFileSide;
+  mode: GitFileMode;
+  size_bytes: number;
+  /** utf8 for text; base64 for binary content. */
+  encoding: "utf8" | "base64";
+}
+
+/** Response shape for DraftFileSideSummary. */
+export interface DraftFileSideSummaryRead {
+  side: DraftFileSide | (string & {});
+  mode: GitFileMode | (string & {});
+  size_bytes: number;
+  /** utf8 for text; base64 for binary content. */
+  encoding: ("utf8" | "base64") | (string & {});
+}
+
+export interface DraftFileConflict {
+  /**
+   * Why the merge stopped. no_common_version: there is no earlier version to compare, such as the
+   * first Draft of an adopted package. file_ownership: generated output collides with a file you
+   * added. repository_deleted_incoming_changed and incoming_deleted_repository_changed: one side
+   * deleted a file the other changed. overlapping_text: both sides edited the same lines.
+   * too_large_to_merge: the file has too many changed lines to merge line by line. binary_changed
+   * and file_mode_changed: both sides changed binary content or the file mode.
+   */
+  kind: "no_common_version"
+    | "file_ownership"
+    | "repository_deleted_incoming_changed"
+    | "incoming_deleted_repository_changed"
+    | "overlapping_text"
+    | "too_large_to_merge"
+    | "binary_changed"
+    | "file_mode_changed";
+  /**
+   * Where the incoming version comes from: the new Generation, commits on the default branch, or
+   * the code of a Draft whose branch was rebased, reset, or deleted (its old branch is preserved).
+   * The merge applies previous_draft, then default_branch, then generation, and stops at the first
+   * stage with conflicts, so applying one stage's decisions can report conflicts from the next.
+   */
+  source: "generation" | "default_branch" | "previous_draft";
+  /**
+   * Decision saved for this conflict on head_revision; null when none. Saved decisions apply when
+   * the Target is generated.
+   */
+  decision: "repository" | "incoming" | "content" | null;
+}
+
+/** Response shape for DraftFileConflict. */
+export interface DraftFileConflictRead {
+  /**
+   * Why the merge stopped. no_common_version: there is no earlier version to compare, such as the
+   * first Draft of an adopted package. file_ownership: generated output collides with a file you
+   * added. repository_deleted_incoming_changed and incoming_deleted_repository_changed: one side
+   * deleted a file the other changed. overlapping_text: both sides edited the same lines.
+   * too_large_to_merge: the file has too many changed lines to merge line by line. binary_changed
+   * and file_mode_changed: both sides changed binary content or the file mode.
+   */
+  kind: ("no_common_version"
+    | "file_ownership"
+    | "repository_deleted_incoming_changed"
+    | "incoming_deleted_repository_changed"
+    | "overlapping_text"
+    | "too_large_to_merge"
+    | "binary_changed"
+    | "file_mode_changed") | (string & {});
+  /**
+   * Where the incoming version comes from: the new Generation, commits on the default branch, or
+   * the code of a Draft whose branch was rebased, reset, or deleted (its old branch is preserved).
+   * The merge applies previous_draft, then default_branch, then generation, and stops at the first
+   * stage with conflicts, so applying one stage's decisions can report conflicts from the next.
+   */
+  source: ("generation" | "default_branch" | "previous_draft") | (string & {});
+  /**
+   * Decision saved for this conflict on head_revision; null when none. Saved decisions apply when
+   * the Target is generated.
+   */
+  decision: ("repository" | "incoming" | "content" | null) | (string & {}) | null;
+}
+
+export interface DraftFileHistory {
+  /**
+   * How the rewritten default branch differs from the last accepted package; null when only the
+   * Draft differs.
+   */
+  change: "added" | "edited" | "deleted" | "mode_changed" | null;
+  /**
+   * The Draft branch has a different version than the rewritten default branch. Recovery carries
+   * the Draft version forward.
+   */
+  draft_differs: boolean;
+}
+
+/** Response shape for DraftFileHistory. */
+export interface DraftFileHistoryRead {
+  /**
+   * How the rewritten default branch differs from the last accepted package; null when only the
+   * Draft differs.
+   */
+  change: ("added" | "edited" | "deleted" | "mode_changed" | null) | (string & {}) | null;
+  /**
+   * The Draft branch has a different version than the rewritten default branch. Recovery carries
+   * the Draft version forward.
+   */
+  draft_differs: boolean;
+}
+
+export interface DraftFile {
+  object: "draft_file";
+  /** Path relative to the Target's package directory. */
+  path: string;
+  /** How the Draft differs from the last accepted package at this path; null when it does not. */
+  customization: "added" | "edited" | "deleted" | "mode_changed" | null;
+  conflict: DraftFileConflict | null;
+  history: DraftFileHistory | null;
+  /**
+   * Sides of the comparison to read with retrieveDraftFileContent. A missing side means the file is
+   * absent there. Listed for conflicts and history files.
+   */
+  sides: DraftFileSideSummary[];
+}
+
+/** Response shape for DraftFile. */
+export interface DraftFileRead {
+  object: "draft_file" | (string & {});
+  /** Path relative to the Target's package directory. */
+  path: string;
+  /** How the Draft differs from the last accepted package at this path; null when it does not. */
+  customization: ("added" | "edited" | "deleted" | "mode_changed" | null) | (string & {}) | null;
+  conflict: DraftFileConflictRead | null;
+  history: DraftFileHistoryRead | null;
+  /**
+   * Sides of the comparison to read with retrieveDraftFileContent. A missing side means the file is
+   * absent there. Listed for conflicts and history files.
+   */
+  sides: DraftFileSideSummaryRead[];
+}
+
+export interface DraftFileList {
+  object: ListObject;
+  data: DraftFile[];
+  has_more: boolean;
+  next_cursor: string | null;
+  request_id: RequestId;
+}
+
+/** Response shape for DraftFileList. */
+export interface DraftFileListRead {
+  object: ListObject;
+  data: DraftFileRead[];
+  has_more: boolean;
+  next_cursor: string | null;
+  request_id: RequestId;
+}
+
+export interface DraftFileContent {
+  object: "draft_file_content";
+  target_id: TargetId;
+  path: string;
+  side: DraftFileSide;
+  /** utf8 means content is text; base64 means content is base64-encoded binary bytes. */
+  encoding: "utf8" | "base64";
+  /**
+   * At most 24 KiB of the file starting at offset. Text chunks never split a character; concatenate
+   * chunks in order.
+   */
+  content: string;
+  mode: GitFileMode;
+  /** Size of the whole file in bytes. */
+  size_bytes: number;
+  /** Byte offset of this chunk in the file. */
+  offset: number;
+  /**
+   * Pass as cursor, with the same path and side, to read the next chunk; null at the end of the
+   * file.
+   */
+  next_cursor: string | null;
+}
+
+/** Response shape for DraftFileContent. */
+export interface DraftFileContentRead {
+  object: "draft_file_content" | (string & {});
+  target_id: TargetId;
+  path: string;
+  side: DraftFileSide | (string & {});
+  /** utf8 means content is text; base64 means content is base64-encoded binary bytes. */
+  encoding: ("utf8" | "base64") | (string & {});
+  /**
+   * At most 24 KiB of the file starting at offset. Text chunks never split a character; concatenate
+   * chunks in order.
+   */
+  content: string;
+  mode: GitFileMode | (string & {});
+  /** Size of the whole file in bytes. */
+  size_bytes: number;
+  /** Byte offset of this chunk in the file. */
+  offset: number;
+  /**
+   * Pass as cursor, with the same path and side, to read the next chunk; null at the end of the
+   * file.
+   */
+  next_cursor: string | null;
+}
+
+export type DraftFileContentResponse = DraftFileContent & ResponseMetadata;
+
+/** Response shape for DraftFileContentResponse. */
+export type DraftFileContentResponseRead = DraftFileContentRead & ResponseMetadata;
+
+export type DraftConflictDecision = {
+  path: string;
+  /** Keep that version of the file exactly. Keeping an absent version deletes the path. */
+  keep: "repository" | "incoming";
+}
+  | {
+      path: string;
+      keep: "content";
+      /** Final file text, stored as UTF-8. An empty string creates an empty file. */
+      content: string;
+      mode: GitFileMode;
+    }
+  | {
+      path: string;
+      keep: "content";
+      /** Final file bytes as canonical base64, for binary files. */
+      content_base64: string;
+      mode: GitFileMode;
+    }
+  | {
+      path: string;
+      keep: "content";
+      /** Delete this file. */
+      content: null;
+    };
+
+/** Response shape for DraftConflictDecision. */
+export type DraftConflictDecisionRead = {
+  path: string;
+  /** Keep that version of the file exactly. Keeping an absent version deletes the path. */
+  keep: ("repository" | "incoming") | (string & {});
+}
+  | {
+      path: string;
+      keep: "content" | (string & {});
+      /** Final file text, stored as UTF-8. An empty string creates an empty file. */
+      content: string;
+      mode: GitFileMode | (string & {});
+    }
+  | {
+      path: string;
+      keep: "content" | (string & {});
+      /** Final file bytes as canonical base64, for binary files. */
+      content_base64: string;
+      mode: GitFileMode | (string & {});
+    }
+  | {
+      path: string;
+      keep: "content" | (string & {});
+      /** Delete this file. */
+      content: null;
+    };
+
+export interface ResolveDraftConflicts {
+  /** The Draft's head_revision. A newer Draft commit returns 409 stale_draft without saving. */
+  expected_head_revision: string;
+  /**
+   * Unique current conflict paths. Final file content must total at most 2 MiB. Decisions save
+   * together or not at all.
+   */
+  resolutions: DraftConflictDecision[];
+  /**
+   * Validate the decisions and return the planned files without saving.
+   * Default: false
+   */
+  dry_run?: boolean;
+}
+
+/** Response shape for ResolveDraftConflicts. */
+export interface ResolveDraftConflictsRead {
+  /** The Draft's head_revision. A newer Draft commit returns 409 stale_draft without saving. */
+  expected_head_revision: string;
+  /**
+   * Unique current conflict paths. Final file content must total at most 2 MiB. Decisions save
+   * together or not at all.
+   */
+  resolutions: DraftConflictDecisionRead[];
+  /**
+   * Validate the decisions and return the planned files without saving.
+   * Default: false
+   */
+  dry_run?: boolean;
+}
+
+export interface DiscardDraftCustomizations {
+  /** The Draft's head_revision. A newer Draft commit returns 409 stale_draft without committing. */
+  expected_head_revision: string;
+  /**
+   * Customized paths that are not conflicts, to replace with the generated files. A listed file
+   * that exists only on the Draft is deleted.
+   */
+  paths: string[];
+  /**
+   * Return the planned writes and deletions without committing.
+   * Default: false
+   */
+  dry_run?: boolean;
+}
+
+export interface DraftPlannedFile {
+  path: string;
+  /** keep: the Draft's version stays. write: the file gets new content. delete: the path is removed. */
+  action: "keep" | "write" | "delete";
+  mode: GitFileMode | null;
+  /** Size of the resulting file; null when it is deleted. */
+  size_bytes: number | null;
+}
+
+/** Response shape for DraftPlannedFile. */
+export interface DraftPlannedFileRead {
+  path: string;
+  /** keep: the Draft's version stays. write: the file gets new content. delete: the path is removed. */
+  action: ("keep" | "write" | "delete") | (string & {});
+  mode: GitFileMode | (string & {}) | null;
+  /** Size of the resulting file; null when it is deleted. */
+  size_bytes: number | null;
+}
+
+export interface DraftConflictResolution {
+  object: "draft_conflict_resolution";
+  target_id: TargetId;
+  /** Draft commit the decisions belong to. */
+  head_revision: string;
+  /**
+   * preview: nothing was saved. saved: the decisions are stored and apply when the Target is
+   * generated.
+   */
+  status: "preview" | "saved";
+  files: DraftPlannedFile[];
+  /**
+   * Conflicts without a decision once these are saved. At 0 the Draft status becomes
+   * needs_generation.
+   */
+  remaining_conflicts: number;
+}
+
+/** Response shape for DraftConflictResolution. */
+export interface DraftConflictResolutionRead {
+  object: "draft_conflict_resolution" | (string & {});
+  target_id: TargetId;
+  /** Draft commit the decisions belong to. */
+  head_revision: string;
+  /**
+   * preview: nothing was saved. saved: the decisions are stored and apply when the Target is
+   * generated.
+   */
+  status: ("preview" | "saved") | (string & {});
+  files: DraftPlannedFileRead[];
+  /**
+   * Conflicts without a decision once these are saved. At 0 the Draft status becomes
+   * needs_generation.
+   */
+  remaining_conflicts: number;
+}
+
+export type DraftConflictResolutionResponse = DraftConflictResolution & ResponseMetadata;
+
+/** Response shape for DraftConflictResolutionResponse. */
+export type DraftConflictResolutionResponseRead = DraftConflictResolutionRead & ResponseMetadata;
+
+export interface DraftCustomizationDiscard {
+  object: "draft_customization_discard";
+  target_id: TargetId;
+  /** preview: the inspected Draft commit. committed: the new Draft commit. */
+  head_revision: string;
+  /**
+   * preview: nothing was written. committed: one commit was added to the Draft branch; the Draft
+   * status is branch_changed until Typeship integrates it.
+   */
+  status: "preview" | "committed";
+  files: DraftPlannedFile[];
+}
+
+/** Response shape for DraftCustomizationDiscard. */
+export interface DraftCustomizationDiscardRead {
+  object: "draft_customization_discard" | (string & {});
+  target_id: TargetId;
+  /** preview: the inspected Draft commit. committed: the new Draft commit. */
+  head_revision: string;
+  /**
+   * preview: nothing was written. committed: one commit was added to the Draft branch; the Draft
+   * status is branch_changed until Typeship integrates it.
+   */
+  status: ("preview" | "committed") | (string & {});
+  files: DraftPlannedFileRead[];
+}
+
+export type DraftCustomizationDiscardResponse = DraftCustomizationDiscard & ResponseMetadata;
+
+/** Response shape for DraftCustomizationDiscardResponse. */
+export type DraftCustomizationDiscardResponseRead = DraftCustomizationDiscardRead & ResponseMetadata;
+
+export interface GenerateProjectRequest {
+  /** Generate only this active Target. Omit to generate all active Targets in the Project. */
+  target_id?: TargetId;
+}
+
+/** The stage that failed. A delivery failure does not change a Generation's succeeded status. */
+export const FailurePhase = {
+  DEFINITION: "definition",
+  GENERATION: "generation",
+  DELIVERY: "delivery",
+  PUBLICATION: "publication",
+} as const;
+export type FailurePhase = (typeof FailurePhase)[keyof typeof FailurePhase];
+
+export type DomainError = ErrorDetail & {
+  phase: FailurePhase;
+};
+
+/** Response shape for DomainError. */
+export type DomainErrorRead = ErrorDetailRead & {
+  phase: FailurePhase | (string & {});
+};
+
+export interface RecoverDraftHistory {
+  /** The Draft's history_recovery.default_revision. */
+  expected_default_revision: string;
+  /** The Draft's history_recovery.head_revision; null when the Draft branch is absent. */
+  expected_head_revision: string | null;
+}
+
+export interface DraftHistoryRecovery {
+  object: "draft_history_recovery";
+  target_id: TargetId;
+  /**
+   * approved: recovery is saved and the Draft status is needs_generation. not_needed: the default
+   * branch still contains the accepted package.
+   */
+  status: "approved" | "not_needed";
+  default_revision: string;
+  head_revision: string | null;
+  /** Existing Draft branch that stays available when Generate opens the recovered Draft. */
+  preserved_branch: string | null;
+}
+
+/** Response shape for DraftHistoryRecovery. */
+export interface DraftHistoryRecoveryRead {
+  object: "draft_history_recovery" | (string & {});
+  target_id: TargetId;
+  /**
+   * approved: recovery is saved and the Draft status is needs_generation. not_needed: the default
+   * branch still contains the accepted package.
+   */
+  status: ("approved" | "not_needed") | (string & {});
+  default_revision: string;
+  head_revision: string | null;
+  /** Existing Draft branch that stays available when Generate opens the recovered Draft. */
+  preserved_branch: string | null;
+}
+
+export type DraftHistoryRecoveryResponse = DraftHistoryRecovery & ResponseMetadata;
+
+/** Response shape for DraftHistoryRecoveryResponse. */
+export type DraftHistoryRecoveryResponseRead = DraftHistoryRecoveryRead & ResponseMetadata;